What is a phishing simulation?
A phishing simulation is a fake phishing email sent to employees to test whether they click, enter credentials, or report it. Results show who needs more training and whether awareness improves over time. It is common alongside security awareness training.
What the buyer is really asking
Say whether you run simulated phishing, how often, and what happens when someone clicks. If you do not run simulations, say what you do about phishing instead, such as email filtering and phishing-resistant MFA.
Other ways buyers ask it
Every one of these wants the same answer:
- “Do you conduct phishing simulations?”
- “How often do you test employees with simulated phishing?”
- “What is your phishing click rate?”
Evidence to have ready
- Phishing simulation results
- Email security configuration
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.