Infosec Iq discussions

i'm curious about how organizations can assess whether their cybersecurity training is effective. what metrics or strategies should they look at?

i’m really interested in hearing about the difficulties organizations face when implementing cybersecurity training programs. what do people struggle with the most?