Human risk · 4 min read
What should we measure after security awareness training?
Training completion tells you who finished a course. Here’s how I’d track what employees do afterward and whether those behaviors hold over time.
Read the articleCybersecurity governance & operations
Field Notes
on Cyber Risk
Practical writing on how teams measure security behavior, govern vendors, and keep controls ready for scrutiny.
Explore the writingThe journal
Latest writing
Editorial focus
What I write about
01
Human risk
Security awareness, phishing reporting, and how employee behavior changes over time.
02
Vendor governance
Third-party oversight, risk escalation, and evidence that remediation is complete.
03
Audit readiness
How security teams make controls easier to test and maintain in day-to-day operations.
About the author
Vahsek Dinga
I work across cybersecurity governance, IT audit, third-party risk, and data center security operations. I’m pursuing a Ph.D. in Cybersecurity Management at Nova Southeastern University, where my research focuses on human risk and security awareness effectiveness.
Visit my professional website