Cyber Security Report Reveals Factors That Contribute to High Click Rates and High Risk of Credential Theft

LAVAL, Quebec, Jan. 29, 2020 /CNW Telbec/ - Gone Phishing Tournament^™ Global Benchmark Results Highlight the Need for Organizations to implement both a security awareness training program and consistent phishing simulations for optimal results.

The Terranova Security 2019 Phishing Global Benchmark Report provides the latest click rate statistics by vertical, organization size, geographical location, and level of security awareness and phishing simulation programs in place.

In October 2019, over five days, Terranova Security held its annual Gone Phishing Tournament. The goal of this tournament is to give organizations an opportunity to know how their click rate compares to that of organizations with similar characteristics including vertical or industry, size and geographical location.

Click rate benchmarking gives organizations real tangible data about employee cyber security and phishing awareness. Once organizations know their phishing threat risk, they can take actionable steps to lower their click rate and secure their organization against cyberthreats.

"As a recognized leader and partner of choice for security awareness training, we are proud to deliver on our commitment to support security leaders with actionable data and global phishing benchmarks to help build effective programs that increase security awareness and reduce human risk." Lise Lapointe, Author and CEO of Terranova Security.

Key Results from the 2019 Gone Phishing Tournament^™

The 2019 Gone Phishing Tournament reinforces how important it is for organizations to use a combination of security awareness training and phishing simulations to decrease the click rate and reduce the likelihood of these attack being successful.

The 2019 Gone Phishing Tournament revealed that even in organizations with security awareness programs in place, employees are still clicking phishing emails:

• 11% of recipients clicked the phishing link
• 2% of recipients submitted their credentials on the phishing website

Security and risk management leaders need to know these key results from the 2019 Gone Phishing Tournament:

• In organizations with no security awareness programs in place, 13% of users clicked the phishing link.
• In organizations with only a security awareness program in place, 29% of users submitted their credentials after clicking the phishing link.
• In organizations with both security awareness and phishing simulations, the credential submission rate is 47% lower.

Unique Approach for True Click Rate Benchmarking by Industry, Company Size & Geo

The Terranova Security Gone Phishing Tournament is unique and the only global phishing simulation event that allows participating organizations compare same to same.

To give organizations real facts on their click rate, Terranova Security launched a global phishing simulation event and deployed the same template within a single testing period for all users. Participating organizations received a customized click rate report that showed how they compare to organizations in the same industry, similar size, location, and level of security awareness and phishing programs in place.

With this information, organizations can honestly answer "How does my click rate stack up?" and take actions to improve their click rate.

Over the course of five days in October 2019, phishing emails were sent in 27 languages, in 76 countries and across 15 time zones. Using a scenario that includes two opportunities (email and website) for users to detect the phish, the global phishing simulation results measure and evaluate employee awareness of the risks of clicking phishing emails and of submitting personal credentials online.

"Awareness and Phishing Simulations together offer a significant advantage with 47% lower credential submission rate," according to Theo Zafirakos, CISO at Terranova Security, "while the use of unsupported operating systems and browsers continue to put users and organizations at risk."

Visit the Terranova Security website to learn more about the 2019 Gone Phishing Tournament and to sign up for the 2020 Gone Phishing Tournament.

Download the 2019 Phishing Benchmark Global Report to get all the results and facts on the 2019 Gone Phishing Tournament.

About Terranova Security

Terranova Security is a global leader and partner of choice in security awareness training with successful security awareness and phishing simulation programs spanning over 7 million users. Recognized for providing amongst the highest-quality content, most multilingual security awareness platform, training and communications portfolio and intuitive phishing simulator, organizations continue to leverage the Terranova Security awareness 5-step framework which provides an evidence-based, step-by-step approach to a successful security awareness program. Terranova Security is working with organizations and security awareness teams worldwide to design programs that drastically reduce the human risk factor to effectively counter all cyber attacks. Learn more at terranovasecurity.com.

LEGAL NOTICES

Copyright © 2020 Terranova WW Corporation, Inc. All Rights Reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies. 

Additional information:

Kareen Pate
Marketing and Communication Advisor
Kareen.pate@terranovasecurity.com  
1 514-489-5806