{"id":35556,"date":"2025-10-14T14:08:38","date_gmt":"2025-10-14T14:08:38","guid":{"rendered":"https:\/\/grapenordic.com\/phishing-test-or-awareness-training-what-works-best\/"},"modified":"2025-11-25T06:06:09","modified_gmt":"2025-11-25T06:06:09","slug":"phishing-test-or-awareness-training-what-works-best","status":"publish","type":"post","link":"https:\/\/grapenordic.com\/en\/phishing-test-or-awareness-training-what-works-best\/","title":{"rendered":"Phishing test or awareness training? What works best?"},"content":{"rendered":"[vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#243936″ scene_position=”center” top_padding=”6%” bottom_padding=”4%” top_padding_tablet=”20%” top_padding_phone=”20%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][nectar_responsive_text inherited_font_style=”default” font_size_desktop=”65″ font_size_tablet=”30″ font_size_phone=”30″ text_direction=”default” font_line_height=”1″]\n

Phishing test or awareness training?<\/span><\/h2>\n[\/nectar_responsive_text][\/vc_column_inner][vc_column_inner column_padding=”padding-2-percent” column_padding_tablet=”no-extra-padding” column_padding_phone=”no-extra-padding” column_padding_position=”left” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” font_color=”#ffffff” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” css_animation=”” column_padding_type=”default” gradient_type=”default”][vc_column_text css=”” text_direction=”default”]Stands<\/span> your <\/span>organization<\/span> across the street<\/span> rising<\/span> phishing<\/span>threats<\/span>, <\/span>human<\/span> I <\/span>at the same time<\/span> struggling<\/span> with that <\/span>get<\/span> employees<\/span> to<\/span> that <\/span>Roof<\/span> cyber security<\/span> serious<\/span>? You are <\/span>not<\/span> alone<\/span>. Many IT<\/span>security managers<\/span> is located<\/span> sig <\/span>i<\/span> a dilemma <\/span>Between<\/span> that <\/span>Drive<\/span> phishing test <\/span>and<\/span> invest<\/span> i<\/span> thorough<\/span> awareness-<\/span>Training<\/span>.<\/span><\/span> [\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”full_width_content” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#243936″ bg_image=”26780″ bg_position=”center center” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding_tablet=”1%” top_padding_phone=”1%” text_color=”light” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”home” overlay_strength=”1″ gradient_direction=”left_to_right” shape_divider_color=”#dce8e3″ shape_divider_position=”bottom” shape_divider_height=”50%” bg_image_animation=”none” parallax_bg=”true” parallax_bg_speed=”fast” shape_type=”straight_section” gradient_type=”default”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ background_image=”32719″ background_image_position=”center bottom” background_image_stacking=”default” enable_bg_scale=”true” background_image_loading=”default” column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”5px” column_link_target=”_self” column_position=”default” enable_gradient=”true” color_overlay=”rgba(0,0,0,0.75)” color_overlay_2=”rgba(0,0,0,0.25)” gradient_direction=”left_t_to_right_b” overlay_strength=”0.8″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][divider line_type=”No Line” custom_height=”200px”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” top_margin=”40″ bottom_margin=”-55″ column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” top_padding=”80px” top_padding_tablet=”20px” top_padding_phone=”0px” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/6″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][\/vc_column_inner][\/vc_row_inner][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” el_id=”svindlerne” text_direction=”default”]\n
Written by Anders Schultz-M\u00f8ller<\/a><\/em><\/h5>\n[\/vc_column_text][vc_column_text css=”” text_direction=”default”]\n

<\/h2>\n

Research shows that continuous, targeted IT security and awareness training outperforms one-off phishing tests when it comes to behavioral change, reporting culture and security awareness. According to a <\/span>Report from Stanford University<\/span><\/a> 88% of data breaches are due to human error, highlighting the need for effective training. But what does this mean for your security strategy? And how can you avoid the negative side effects that many test-based approaches bring? <\/span><\/p>\n

In this article, we review the evidence behind both approaches and give you concrete recommendations to strengthen your organization’s cyber security without creating guilt or stress among employees.<\/span><\/p>\n

Why phishing <\/span><\/span>phishing test <\/span><\/span>alone<\/span> is not enough <\/span><\/span><\/h2>\n

Phishing tests may seem like the obvious solution. They are simple to implement, provide measurable results and seem immediately effective. But research reveals a more complex picture. <\/span><\/p>\n

Verizon’s Data Breach Investigations Report (DBIR)<\/span><\/b><\/a> consistently shows that phishing and pretexting are behind 44% of all social attacks. At the same time, the report highlights user training as a critical security control – not as a standalone test, but as an integral part of a broader security strategy. <\/span><\/p>\n

UK’s National Cyber Security Center (NCSC)<\/span><\/b><\/a> states that phishing simulations should serve as learning tools rather than fear-inducing exams. Their guidance points out that test-based methods without follow-up training often lead to lower reporting rates and a blame culture. <\/span><\/p>\n

The hidden costs of testing cultures<\/span><\/b><\/h3>\n

Improperly implemented phishing tests can do more harm than good. According to a <\/span>Survey from Tessian<\/span><\/a> 43% of employees feel stressed or embarrassed when they fail a phishing test. Research documents that this approach can lead to: <\/span><\/p>\n