Phishing Simulations That Teach Instead of Punish

PLACEHOLDER — replace with the post body from the Wix culturelabposts collection. A simulation program measured on click rate optimizes for easier lures. One measured on report rate and time-to-report optimizes for a workforce that tells you when something is wrong. The second metric is harder to move and worth more, because it is the one that generalizes to the real campaign you did not write.