A security policy has been approved but employees consistently misunderstand it. Which measure best evaluates whether communication is effective?

1. Demonstrated understanding and correct behavior in relevant work scenarios
2. The number of times the policy title changed
3. The file size of the policy PDF
4. The number of emails containing the policy