End users failed around 9 percent of simulated phishing attacks and answered 22 percent of phishing-related knowledge questions wrong, according to a new analysis of real world end user training that highlights the security areas where users run the most risk of slipping up.

Some 83 percent of global organisations experienced phishing attacks during 2018, according to Proofpoint, which analysed end-user responses to more than 130 million questions administered during email-security training over 14 months from January 2018.

The analysis contained in the recently released Beyond the Phish 2019 report provided a snapshot of users’ strengths and weaknesses while being evaluated against 14 different security-related topics.

Read full article on CSO