{"id":4008,"date":"2024-07-05T10:41:22","date_gmt":"2024-07-05T08:41:22","guid":{"rendered":"https:\/\/cybersecurity.vision\/?p=4008"},"modified":"2026-10-18T06:54:24","modified_gmt":"2026-10-18T06:54:24","slug":"do-phishing-tests-really-work-exploring-hidden-impacts","status":"publish","type":"post","link":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/","title":{"rendered":"Phishing tests: helpful or harmful?"},"content":{"rendered":"

Organizations use phishing tests to enhance security. But are these tests always beneficial? The answer is complex. While phishing tests can provide valuable insights and improve awareness, they can also lead to unintended negative consequences if not carefully designed and implemented.<\/p>\n

The hidden drawbacks<\/h6>\n

While phishing tests aim to improve defenses, they can also have unintended consequences. For example, they can create a sense of distrust or fear among employees if they feel constantly tested or surveilled. Additionally, if phishing tests are too frequent or too difficult, they might demoralize employees and reduce their overall productivity.<\/p>\n

\ud83d\udd0d Research uverview:<\/strong><\/h6>\n

A 15-month study with 14,000 employees reveals key findings. These findings shed light on the nuanced effects of phishing tests and provide guidance on how to balance their implementation to maximize benefits while minimizing drawbacks.<\/p>\n

Simple warnings beat detailed warnings<\/h6>\n

Employees respond better to simple warnings. Detailed warnings do not provide additional protection. This underscores the importance of clear communication in cybersecurity practices. Keeping messages simple and direct can significantly enhance their effectiveness.<\/p>\n

Embedded training: potentially harmful<\/h6>\n

Embedded training might make employees more vulnerable to phishing. This finding contradicts common industry practices. It highlights the need for continuous improvement and adaptation of training methods to ensure they are effective and do not inadvertently increase risks.<\/p>\n

Reporting mechanisms: highly effective<\/h6>\n

Collective employee reporting is an excellent defense strategy. It is both effective and sustainable. By fostering a culture of vigilance and encouraging employees to report suspicious activities, organizations can significantly enhance their security posture. This approach not only improves early detection of threats but also engages employees in the security process, making them an integral part of the defense strategy.<\/p>\n

Interested in this research paper?<\/h6>\n

If you are interested in the whitepaper, please\u00a0let me know.<\/a><\/strong><\/p>\n

What www.koedijk.com\/ offers<\/strong><\/h6>\n

For more information on how we can help your organization, visit our services offerings at www.koedijk.com\/<\/a>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Phishing tests are widely used to gauge employee awareness, but do they truly strengthen your organization\u2019s security posture? This article delves into the hidden impacts of phishing simulations, exploring whether they build resilience or unintentionally foster distrust and anxiety among staff. By examining the effectiveness and potential downsides of these tests, you\u2019ll gain insights into how to better implement them within a data-driven, collaborative security strategy.<\/p>\n","protected":false},"author":6,"featured_media":4010,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"image","meta":{"_joinchat":[],"footnotes":""},"categories":[121],"tags":[],"class_list":["post-4008","post","type-post","status-publish","format-image","has-post-thumbnail","hentry","category-cybersecurity","post_format-post-format-image"],"yoast_head":"\nPhishing tests: helpful or harmful?<\/title>\n<meta name=\"description\" content=\"Organizations use phishing tests to enhance security. But are these tests always beneficial? Read this interesting blog!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phishing tests: helpful or harmful?\" \/>\n<meta property=\"og:description\" content=\"Organizations use phishing tests to enhance security. But are these tests always beneficial? Read this interesting blog!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/\" \/>\n<meta property=\"og:site_name\" content=\"Koedijk\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-05T08:41:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-18T06:54:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.koedijk.com\/wp-content\/uploads\/2024\/02\/SOC-of-the-Future-with-a-cyber-security-vision.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2500\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Erik Jan Koedijk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Erik Jan Koedijk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/\"},\"author\":{\"name\":\"Erik Jan Koedijk\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/#\\\/schema\\\/person\\\/cea92e7bb1abb21d0074fd3b638d44c4\"},\"headline\":\"Phishing tests: helpful or harmful?\",\"datePublished\":\"2024-07-05T08:41:22+00:00\",\"dateModified\":\"2026-10-18T06:54:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/\"},\"wordCount\":320,\"image\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.koedijk.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/Phishing.jpg\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/\",\"url\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/\",\"name\":\"Phishing tests: helpful or harmful?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.koedijk.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/Phishing.jpg\",\"datePublished\":\"2024-07-05T08:41:22+00:00\",\"dateModified\":\"2026-10-18T06:54:24+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/#\\\/schema\\\/person\\\/cea92e7bb1abb21d0074fd3b638d44c4\"},\"description\":\"Organizations use phishing tests to enhance security. But are these tests always beneficial? Read this interesting blog!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.koedijk.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/Phishing.jpg\",\"contentUrl\":\"https:\\\/\\\/www.koedijk.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/Phishing.jpg\",\"width\":2500,\"height\":1200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/do-phishing-tests-really-work-exploring-hidden-impacts\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phishing tests: helpful or harmful?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/\",\"name\":\"Koedijk\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/#\\\/schema\\\/person\\\/cea92e7bb1abb21d0074fd3b638d44c4\",\"name\":\"Erik Jan Koedijk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/98efb470c985115abe8b08f4b40d9cb07a257277f0afafce7ca3dd17d5761bed?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/98efb470c985115abe8b08f4b40d9cb07a257277f0afafce7ca3dd17d5761bed?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/98efb470c985115abe8b08f4b40d9cb07a257277f0afafce7ca3dd17d5761bed?s=96&d=mm&r=g\",\"caption\":\"Erik Jan Koedijk\"},\"url\":\"https:\\\/\\\/www.koedijk.com\\\/en\\\/blog\\\/author\\\/erik-jan-koedijk\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Phishing tests: helpful or harmful?","description":"Organizations use phishing tests to enhance security. But are these tests always beneficial? Read this interesting blog!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/","og_locale":"en_GB","og_type":"article","og_title":"Phishing tests: helpful or harmful?","og_description":"Organizations use phishing tests to enhance security. But are these tests always beneficial? Read this interesting blog!","og_url":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/","og_site_name":"Koedijk","article_published_time":"2024-07-05T08:41:22+00:00","article_modified_time":"2026-10-18T06:54:24+00:00","og_image":[{"width":2500,"height":1200,"url":"https:\/\/www.koedijk.com\/wp-content\/uploads\/2024\/02\/SOC-of-the-Future-with-a-cyber-security-vision.jpg","type":"image\/jpeg"}],"author":"Erik Jan Koedijk","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Erik Jan Koedijk","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#article","isPartOf":{"@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/"},"author":{"name":"Erik Jan Koedijk","@id":"https:\/\/www.koedijk.com\/en\/#\/schema\/person\/cea92e7bb1abb21d0074fd3b638d44c4"},"headline":"Phishing tests: helpful or harmful?","datePublished":"2024-07-05T08:41:22+00:00","dateModified":"2026-10-18T06:54:24+00:00","mainEntityOfPage":{"@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/"},"wordCount":320,"image":{"@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#primaryimage"},"thumbnailUrl":"https:\/\/www.koedijk.com\/wp-content\/uploads\/2024\/07\/Phishing.jpg","articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/","url":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/","name":"Phishing tests: helpful or harmful?","isPartOf":{"@id":"https:\/\/www.koedijk.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#primaryimage"},"image":{"@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#primaryimage"},"thumbnailUrl":"https:\/\/www.koedijk.com\/wp-content\/uploads\/2024\/07\/Phishing.jpg","datePublished":"2024-07-05T08:41:22+00:00","dateModified":"2026-10-18T06:54:24+00:00","author":{"@id":"https:\/\/www.koedijk.com\/en\/#\/schema\/person\/cea92e7bb1abb21d0074fd3b638d44c4"},"description":"Organizations use phishing tests to enhance security. But are these tests always beneficial? Read this interesting blog!","breadcrumb":{"@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#primaryimage","url":"https:\/\/www.koedijk.com\/wp-content\/uploads\/2024\/07\/Phishing.jpg","contentUrl":"https:\/\/www.koedijk.com\/wp-content\/uploads\/2024\/07\/Phishing.jpg","width":2500,"height":1200},{"@type":"BreadcrumbList","@id":"https:\/\/www.koedijk.com\/en\/blog\/do-phishing-tests-really-work-exploring-hidden-impacts\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.koedijk.com\/en\/"},{"@type":"ListItem","position":2,"name":"Phishing tests: helpful or harmful?"}]},{"@type":"WebSite","@id":"https:\/\/www.koedijk.com\/en\/#website","url":"https:\/\/www.koedijk.com\/en\/","name":"Koedijk","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.koedijk.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.koedijk.com\/en\/#\/schema\/person\/cea92e7bb1abb21d0074fd3b638d44c4","name":"Erik Jan Koedijk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/98efb470c985115abe8b08f4b40d9cb07a257277f0afafce7ca3dd17d5761bed?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/98efb470c985115abe8b08f4b40d9cb07a257277f0afafce7ca3dd17d5761bed?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/98efb470c985115abe8b08f4b40d9cb07a257277f0afafce7ca3dd17d5761bed?s=96&d=mm&r=g","caption":"Erik Jan Koedijk"},"url":"https:\/\/www.koedijk.com\/en\/blog\/author\/erik-jan-koedijk\/"}]}},"_links":{"self":[{"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/posts\/4008","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/comments?post=4008"}],"version-history":[{"count":1,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/posts\/4008\/revisions"}],"predecessor-version":[{"id":33439,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/posts\/4008\/revisions\/33439"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/media\/4010"}],"wp:attachment":[{"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/media?parent=4008"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/categories?post=4008"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.koedijk.com\/en\/wp-json\/wp\/v2\/tags?post=4008"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}