To evaluate your project’s success so you can use the best practices on your next project, assess the impact of your activities on mitigating exposure to problems and exploiting opportunities that capitalize on your company’s strengths. For example, if you develop and deliver a training program that creates awareness about internet security, including phishing, viruses and identity theft, measure the number of help desk calls received about these problems. If they go down, you can reasonably assume your risk management initiatives have contributed to success. If not, revise your training program.