A hacker was successful in accessing a financial services company's database of customer information after...

A hacker was successful in accessing a financial services company's database of customer information after an employee clicked on a phishing email link. The company's chief executive officer (CEO) created a project team to address the security breach. As a member of the project team, a talent development (TD) professional is asked to evaluate the current security training for effectiveness. Since this is an urgent issue, the project team has been given 30 days to present recommendations.

Step 2

The data obtained indicates that the current training focuses on defining phishing and does not provide examples or information on how to recognize it and what actions to take.

Step 3

The project team decides that test phishing emails should be created to train employees about phishing and to collect more data on the issue.

Which step(s) should the TD professional take to analyze the effectiveness of the implemented solution?

Step 4

The test phishing emails are created, and the information technology department sets up the deployment schedule and results tracking for the emails. Over the first month, results indicate that 50% of the employees who received the emails clicked on the phishing link and received additional training on recognizing phishing emails.