Security teams spend a lot of emotional capital with employees testing them with simulation phishes in hopes that by tricking them we build our resilience to actual attacks. But do these tests actually work to reduce our human risk? The answer- Yes but to a point.

Here is a quick writeup about our research and findings: elevatesecurity.com/do-phish…