The use of brief training and targeted feedback to decrease clicking on simulated phishing links

Phishing describes electronic attacks that pose a significant risk of exposing sensitive information. Phishing attacks can target individuals for their private information as well as employees to obtain confidential information from organizations. In this study, a simulated phishing attack campaign was implemented across three departments in a nonprofit human services organization. Results indicated that, after brief training and targeted feedback, clicking on simulated phishing attacks appeared to decrease and repeated clicks by staff members ceased to occur.