Think it depends of how you do it. Sending a testmail and provide training afterwords will change nothing. Find a combination of mandantory trainings (not once a year but little lessons throughout the year) Communicate the risk with examples and send test mails - make employees aware and to your partner. Not blaming them but motivate them (maybe with a little quiz etc. etc. . With this approach we were able to lower the klick and interaction rates in our company significantly. Not an IT Job - It’s a Management Job and needs to be a common goal.
