What is a phishing simulation?
A phishing simulation is a safe, realistic phishing message sent to employees so they can practice spotting and reporting an attack. Someone who clicks gets an immediate teachable moment instead of a real compromise.
How it works
Simulations cover email, SMS, voice, QR codes and calendar invites, at levels of difficulty from obvious to highly targeted. The NIST Phish Scale is one way to rate how hard a simulated message is to detect.
The most useful metric is reporting: how many people report the message, and how fast. Click rate alone depends heavily on how hard the test was.
Why it matters
Simulations aimed by risk data, at the right difficulty for each person, build the reporting habit where it matters most. Sending everyone the same template on a schedule mostly measures the template.
How Living Security helps
Living Security Phishing on autopilot sends each person the right test at the right difficulty, on five levels grounded in the NIST Phish Scale, at a pace inside the range you approve.
