Beginner’s Guide to Running Employee Phishing Simulations
Summary
Huntress outlines how to set up employee phishing simulations, analyze click rates, and use results to guide ongoing security awareness training.
Key points
- Phishing simulations let employees practice identifying and reporting realistic phishing emails in a safe setting.
- The guide recommends running tests at least monthly and treating them as a learning tool, not a way to punish employees.
- Setup includes importing learners, whitelisting the simulator, choosing a scenario and audience, scheduling delivery, and selecting follow-up training.
- The article says 30–40% of employees at new companies may click an initial simulated test; a 0% result may indicate delivery or whitelisting problems.
- Use click rates to guide further training, but aim for sustained improvement rather than a permanent 0% rate.
Article Details
- Topic
- Guidance for setting up, running, and evaluating employee phishing simulation training as part of a security awareness program.
Vendors
Products
Curriculaimportant to understand what you’re up against as a team. If you haven’t been introduced to her yet, Curricula uses a fun persona, DeeDee, our 5-year old AI hacker phishing prodigy.Huntress Managed SATIf you haven’t filled out your FREE Huntress Managed SAT Trial, do it now to access our phishing simulator and more free security training tools.