A phishing simulation is a controlled, harmless attack sent by an organisation to its own employees to train them to recognise and report real phishing and social engineering. Modern simulations go beyond email, because attacks on mobile devices see 40 percent higher click rates, and per-seat prices often leave out costs such as admin time and works council delays.
