1 min read
Phishing simulations without shaming people
How to run awareness tests that improve reporting rates instead of breeding resentment.
Click rates make for dramatic charts. Culture change comes from what happens after someone clicks.
Do this
- Thank people who report suspicious mail, even when it is a drill
- Give a one-minute coaching note, not a public leaderboard of “failures”
- Tune difficulty to your industry’s real threats
Avoid this
- Tricking people with cruel personal bait
- Punishing first-time mistakes
- Annual-only training with no follow-up
We can help design a program that fits a small company. Reach out.