Analysis of the effectiveness of educational phishing campaigns as a tool to increase employee cyberbullying

Abstract

Regular deployment of simulated phishing attacks is an effective way to test employees' knowledge and respond to real threats. These simulations provide insight into vulnerabilities in an organization and help identify areas for improvement. By simulating real phishing attempts, organizations can enhance training and prepare employees to recognize and respond appropriately to similar threats in real life. Educational phishing campaigns are an important tool for improving the cyber literacy of employees in organizations. They help identify vulnerabilities and train staff to recognize different types of cyber attacks. The effectiveness of such campaigns is assessed by analyzing the percentage of successful attacks, the number of suspicious emails reported, the response time to the threat, as well as by conducting surveys and knowledge testing. Regular training attacks,

content adaptation and integration with training programs contribute to improving the overall cyber literacy of employees and reducing cybersecurity risks. To increase the level of cyber literacy of the organization's employees, it is advisable to analyze the results of educational phishing in order to identify weaknesses and develop effective measures to eliminate them. As part of this study, it is proposed to assess the level of staff awareness of existing information security threats through the modeling of phishing attacks. The analysis of the data obtained will make it possible to identify the most vulnerable categories of employees and develop personalized training programs aimed at improving their competence in the field of protection against digital threats. In the article, we described an approach to analyzing the results obtained during an experimental phishing attack.