An awareness exercise shows that employees report suspicious messages more quickly after training. Which metric directly supports that conclusion?

1. Median time from receipt to reporting
2. Number of servers purchased that quarter
3. Total storage consumed by email attachments
4. Average password length in the directory