The effectiveness of social engineering penetration testing using phishing can be used as a Key...

 Purpose of Social Engineering Penetration Testing:

Phishing simulations evaluate the organization’s security awareness by testing employees’ ability to recognize and respond to phishing attempts.

 Why This is Correct:

Phishing test outcomes directly measure the effectiveness of security awareness training and highlight areas for improvement.

 Why Other Options Are Incorrect:

A. Risk Management Program: Focuses on identifying and mitigating risks, not awareness.

B. Anti-Spam Controls: Deals with technical filtering, not human behavior.

D. Identity and Access Management Program: Manages user access, not awareness.

 References:

EC-Council aligns phishing test effectiveness with the success of an organization’s security awareness program.