The Emperor’s New Clothes: Why Compulsory CBTs and Phishing Tests Keep Failing
Most phishing training, and indeed most compulsory computer-based training
(CBT) modules, are largely ineffective in reducing incidents - and are
therefore a waste of time and resources.
Finally we have the data we need to challenge this, and find a better path
to user awareness that may actually reduce the frequency and impact of
cyber incidents.