Tag

cyber risk reduction

posts

phishing simulation training

Phishing Simulation Training: Why Most Programs Fail

A 60% Click Rate That Should Have Been a Wake-Up Call I ran a phishing simulation training exercise for a mid-size logistics company last year. The first campaign used a fake Microsoft 365 password reset email — nothing fancy, no zero-day exploit, just a convincing lure. Sixty percent of employees clicked.

Carl B. Johnson Jun 22, 2026 5 min read