Breaking the Stigma: 90% of Employees Agree that Phishing Simulations Improve their Security Awareness

An international survey on simulated phishing finds that roughly 90% of employees view these tests as relevant and effective, supported by 2024 data showing an 86% reduction in click rates (from 34.3% pre-training to 4.6% after 12 months); however, stigma persists where follow-up is lacking, with 29% reporting no or uncertain follow-up (ranging from 15% in the USA to 42.5% in France). The report recommends making simulations realistic, educational, timely, transparent, and positively reinforced to strengthen security culture without punitive practices.