Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.
An effective way to evaluate the effectiveness of an information security awareness program for end users, especially senior executives, is to conduct periodic:
A . Baseline of computer systems
B . Password changes
C . Controlled spear phishing campaigns
D . Scanning for viruses
Answer: C