Users are the easiest targets for attacks from cyberspace. Preventive actions play a significant role in protection, one form of prevention is Cybersecurity Awareness. To get feedback on the effectiveness of awareness, measurements need to be taken. Measuring the results and effectiveness of security awareness programs is more difficult than follow-up surveys after training and education. The impact of awareness-raising on cognitive abilities must be measured, i.e. the extent to which the correct response occurs after threats are perceived and recognised. This publication presents several methods and solutions for measuring information security awareness programs, as well as evaluation methods to assess their effectiveness.