Security awareness teaches things. Metrics measure things. But we often struggle to get useful metrics from our awareness programmes. Re-evaluate the measurements you really want and need, then discover how to generate reliable, useful, and meaningful metrics that answer the questions we can’t ask.