As discussed below , these efforts included testing controls , monitoring compliance with policies , analyzing security incidents , and accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective .
Accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective , monitoring compliance with policies , analyzing security incidents , and testing controls , were all included in these efforts , as discussed below .