Third-party phishing simulation cadence

Overview

Simulations measure behavior—but culture matters more than scores.

Cadence

Monthly for high-risk verticals; quarterly others; skip busy weeks (year-end finance freeze).

Content variety

Credential harvest, attachment, SMS/voice adjunct if licensed—rotate difficulty.

Transparency

Tell unions/school boards simulations may occur—some jurisdictions require notice.

Improvement loop

Micro-learning 2-minute module after failure, not punishment.