HRM-INT-05Term
Phishing simulation
A controlled, consented lure sent to the workforce to observe who clicks, submits, opens and reports. Results are signals per person; the channel (email, SMS, voice, QR, video) is an attribute of each simulation.
Example
A security awareness lead sends a fake delivery notice to the warehouse team and records who scanned the QR code and who reported it.
Also called
4How analysts, standards and vendors name the same idea.
- social engineering attacksCIS Controls v8.114.2 trains the workforce to recognize phishing, BEC, pretexting and tailgating.
- adaptive phishing trainingHoxhunt
- simulationLiving SecurityA controlled exercise, such as a phishing simulation, to observe responses.
- phishing simulationsVerizon DBIR
Sources
4Narrower terms
1Related terms
7"Phishing simulation" (HRM-INT-05), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/phishing-simulation
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.