When is this useful?
Awareness work is more useful when you understand which situations create difficulties. A phishing simulation observes the receipt of deceptive messages and associated reactions within a defined exercise. It also considers reporting and how support teams handle an alert.
Reporting to plan
- Results interpreted in the context of the scenario
- Observations on reactions and reported messages
- An awareness plan suited to the needs identified
Scope, timeline and deliverables are agreed before work begins.
Frequently asked questions
Is the click rate enough to assess security?
No. The scenario, context, reporting and team response also matter. A single metric can give an incomplete picture.
What should we prepare first?
Objectives, participants, responsibilities, arrangements for handling results and support after the exercise.