52% of the UK organisations surveyed have no measure of the effectiveness of their security awareness training.