Distributor cuts its phishing failure rate from 26 percent to under 1 percent in eight monthly campaigns
A regional industrial distributor. Outcome verified
The problem
A regional industrial distributor's insurance audit had shown that about one in ten employees engaged with a simulated phishing email and 6 percent clicked. The company had no ongoing way to train its several hundred users or measure whether they were improving. It runs Google Workspace rather than Microsoft, its people are spread across about 20 locations, and it had no platform or staff to run monthly campaigns and follow up.
Why it mattered
Phishing is the most common entry point for ransomware and business email compromise, and the insurer asked how often phishing training was conducted. 'Never' was not an acceptable answer.
What we did
Rather than one annual training, Vizius set up a managed monthly program: a rotating library of phishing tactics, immediate remedial training for anyone who fell for a simulation, and a monthly report. The premise: passing one campaign proves little; risk drops only when people see many lures over time.
What changed
After a 26 percent failure rate on the September 2022 baseline campaign, monthly failure rates fell into the low single digits, reaching 0.8 percent by April 2023 across roughly 365 users.
- Logistics and distribution
- Midsize company
- Cyber insurance requirements