We learnt a huge amount as a result of doing the DDoS test simulation. It was better doing this in a controlled manner instead of waiting until we are hit for real. We now understand a lot more about our systems and our people have gained useful experience, which has only improved our readiness for a real attack.
We certainly see the real value of doing this on a regular basis in a similar way to testing our fire alarm system so that people and systems operate under real scenarios efficiently.
78% of 2.7m people tested in 2017 did not click on a phishing link all year. Well done. However, an average of 4% of people in each test clicked on an unknown link. Not as comforting.
Source: 2018 Data Breach Investigations Report 11th edition
Solution: Cybersecurity training and anti-phishing systems can help toughen up your "human firewall".