Which indicator is will help to understand the effectiveness of an information security awareness training?