← Back to Tools
Staff Phishing Vulnerability Index
Determine the firm's exposure to social engineering attacks during the chaotic peak periods of March and April.
Interactive Model
10
200
0
50
Compromised Credentials per Campaign
Model Assumptions: Assumes a sophisticated, tax-themed phishing campaign (e.g., 'Urgent: IRS Notice for Client X') bypassing standard spam filters.
Common Mistakes
Relying on an annual, one-hour PowerPoint presentation on cybersecurity and assuming the staff is prepared for sophisticated spear-phishing.
Frequently Asked Questions
What is an acceptable click rate?
Industry average for accounting firms before training is 15-20%. A mature, continuously trained firm should aim for under 3%.
How do we mitigate this?
Continuous, automated phishing simulations and immediate, mandatory micro-training for staff who fail the simulations.