Tag

Measuring Security Culture

posts

Security Awareness Metrics

Security Awareness Metrics That Prove ROI in 2023

When MGM Resorts got hit with a devastating social engineering attack in September 2023, it wasn't a firewall failure. It wasn't a zero-day exploit. A threat actor called the help desk, impersonated an employee, and walked right through the front door. The estimated cost? Over $100

Carl B. Johnson Sep 16, 2023 7 min read
Security Awareness Metrics

Security Awareness Metrics That Prove ROI in 2026

When the SEC fined SolarWinds' CISO for misleading investors about cybersecurity practices, it sent a shockwave through every security department in America. The message was unmistakable: vague assurances about security posture aren't enough anymore. Boards, regulators, and cyber insurers now demand evidence. That's why security

Carl B. Johnson Oct 10, 2020 8 min read