text: As discussed below , these efforts included testing controls , monitoring compliance with policies , analyzing security incidents , and accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective .
  
  ###
  
  Accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective , monitoring compliance with policies , analyzing security incidents , and testing controls , were all included in these efforts , as discussed below .