https://resources.cybsafe.com/measuring-the-effectiveness-of-security-awareness-training/