“Organizations tend to spend a lot of time looking at vulnerabilities on their assets but they fail to consider the all-important human factor. We’re running quarterly phishing exercises to educate our employees and enhance their overall awareness to threats, and we’ve been able to measure significant improvements over time based on these programs.”

Phishing has been around almost as long as the Internet. While some attempts can be spotted a mile away, others have grown increasingly sophisticated. Even the best enterprise spam filters can’t catch every malicious communication. Unfortunately, a single careless click from an employee can have devastating consequences for the entire organization.

But what’s the best way to improve employee awareness?