Metrics & Measurements

Most experienced practitioners know the standard metrics are weak. Completion rates measure button-pressing. Phishing click rates measure one narrow behaviour in a simulated scenario. Culture surveys are often bolted on to mandatory training and treated as an afterthought. We know this. And yet a lot of us are still reporting the same numbers we inherited five years ago. The problem isn't awareness. It's that switching to better metrics is genuinely hard, and the obstacles are rarely talked about honestly.