Kapitel 08 av 11 · Stop the Attack

Running phishing simulations that teach

Simulations work when they are realistic, regular and followed by short learning.

  • Av Thilanka Dilshan
  • Uppdaterad 7 oktober 2026

Simulations work when they are realistic, regular and followed by short learning. The goal is fewer clicks and more reports over time, not catching people out.

What this means in practice

A useful test is to ask who would act on this tomorrow morning and what they would need. If the answer is unclear, the gap is organisational rather than technical, and that is usually the cheaper one to close.

Key actions

  • Run simulations monthly at varying difficulty
  • Give short feedback right after a click
  • Track report rate as well as click rate

Next steps

Avoid simulations that damage trust, such as fake bonus offers. Keep the first version short. A one-page routine that people follow beats a long document nobody reads.

Thilanka Dilshan

Boka en säkerhetsgenomgång på 30 minuter.
Ingen säljpresentation.

Prata med en Sverigebaserad analytiker. Vi går igenom din säkerhetsnivå, kartlägger dina luckor och ger dig en tydlig bild av läget, på vanlig svenska.

Boka en kostnadsfri genomgång
Ingen bindning Sverigebaserad analytiker