Awareness 4 min read
Measuring Security Awareness: Metrics That Actually Matter
Click rates, report rates, completion rates: which metrics really show whether your awareness program works, and why anonymized reporting is part of it.
Analytics & Reporting
See progress without exposing anyone.
Meaningful team-level metrics, fully anonymized and works-council friendly. You manage risk, not people.
Book a demoOne glance: where you stand, where to act.
Click, report and data-entry rates over time, risk by department, training progress, all exportable for audits.
Four metrics, one clear risk picture.
Sample data
12%
Click rate
after training before training: 31%
62%
Report rate
after training before training: 19%
3%
Data-entry rate
after training before training: 11%
2 of 8
Risk by department
departments at elevated risk before training: 6 of 8
Anonymized by design, works-council friendly.
- No individual person-level tracking. Only aggregated group/department metrics.
- Transparent rollout with co-determination. Works-agreement templates included.
- Clear retention and deletion periods, always auditable.
More on anonymization & works councils in the compliance hub →
Data sovereignty that stands up to audits.
- EU hosting, Germany on request
- GDPR-compliant
- Works-council friendly
- Audit export
Frequently asked questions about data & analytics
Where is our analytics data hosted?
Protectly is hosted in the EU, exclusively in Germany on request. Today it is operated in German data centres with ISO 27001 or BSI C5 certified providers (Open Telekom Cloud of Deutsche Telekom and Hetzner). You will find details on infrastructure and data processing in the compliance hub. NIS2 / Compliance →
Does rollout require works-council approval?
We recommend involving the works council early. The analytics are built for it: anonymized, aggregated, with no individual person-level tracking. Works-agreement templates are included.
How long is data retained?
Clear retention and deletion periods apply and are auditable at any time. We agree on the specific periods with you during rollout.
How do we provide evidence of training for audits?
Metrics and training progress can be exported as a report: evidence for audits, insurers and tenders.