2023 Phishing Benchmarking Report for the UK and Ireland

This report presents the findings of the 2023 Phishing Benchmarking study for the United Kingdom and Ireland, focusing on the human factor in cybersecurity. It outlines the methodology used to measure the Phish-prone Percentage (PPP) among employees after various training phases. The report details three phases of testing: the initial baseline phishing security test, results within 90 days of training, and results after one year of ongoing training. It highlights the significant impact of human behavior on cybersecurity, emphasizing the need for continuous security awareness training and simulated phishing tests. The report also discusses the broader cybersecurity landscape in the UK and Ireland, including the challenges posed by ransomware, social engineering attacks, and geopolitical factors. The findings indicate that while the overall PPP has increased, effective training can significantly reduce susceptibility to phishing attacks. The report serves as a resource for organizations to evaluate their cybersecurity posture and implement necessary training programs.