Insights on Employee Click Behavior in Phishing Simulations

Robert K. · 2025-12-04T14:39:33.744Z

Hi community, We have analyzed the days and timeframes when our employees clicked on simulated phishing emails. This provided us with valuable insights into their behavior. I have uploaded the click data in Microsoft Copilot and asked for a overview per day and timeframe. It gave us the overview in the attachment.

Insights on Employee Click Behavior in Phishing Simulations | Human Firewall Leaders Community

5 comments

· Sorted by Oldest

Melissa G.
·
·
Hi Robert K.!👋 These are great insights - thank you so much for sharing them with the community! That kind of behavioral data is extremely valuable. 💯
Did the results confirm any hypotheses you already had about employee behavior?
Were you able to derive any concrete actions from this?
I’d also love to invite other members to join the discussion: Have you explored similar patterns in your analytics- like clicks by time or day? Any tips or best practices you’d like to share with Robert? Janneke, Christian E., Poornima R. Aljoscha T. 🙏
❤️1
Lars S.
·
·
Hey Robert K. - Thanks a lot for the insights and the idea. Currently i am preparing an executive presentation at my company regarding our progress with sosafe. Analyzing the raw data helps a lot to gain further insights. 🙂 Sharing is caring (and as data owner i classified them as "non sensitiv" 😉 ) + "early hours" are critical + Monday is critical because of the weekends
💡
Melissa G.
·
·
Hi Lars S., thanks a lot for sharing. 🙌 Really interesting observations - the points about the “early hours” and Mondays are very insightful! A question to both you and Robert K.: Do insights like these influence how you plan or time your awareness activities or simulations? I’d be curious to hear whether you’ve adapted anything in your approach based on these patterns. Looking forward to your thoughts!💡 Kim H. René K. Arne B. feel free to chime in and share your thoughts too 🙂
Lars S.
·
·
Melissa G. - tbh I'm not entirely sure how to integrate these insights into my security measures. Adapting simulation activities to specific timeframes doesn’t seem right to me. At the moment, my thoughts are leaning toward incorporating them into my security communication strategy. I currently publish an internal security newsletter (Security Schnipsel) every month. I’m considering switching to something like a “Monday Morning Security Briefing.” However that would require a lot of effort. 🤔
💡1
Melissa G.
·
·
Security Schnipsel and Monday Morning Security Briefing sound really interesting, Lars S.! 🤩 So your idea would be to use the insights from employees’ click behavior for awareness communication — i.e., by highlighting these insights on Mondays? Curious to see if and how this evolves over time. 💡 And if you’d like to brainstorm or share ideas with other members, that would be great too! 💯

Melissa G.
·
·
Hi Robert K.!👋 These are great insights - thank you so much for sharing them with the community! That kind of behavioral data is extremely valuable. 💯
Did the results confirm any hypotheses you already had about employee behavior?
Were you able to derive any concrete actions from this?
I’d also love to invite other members to join the discussion: Have you explored similar patterns in your analytics- like clicks by time or day? Any tips or best practices you’d like to share with Robert? Janneke, Christian E., Poornima R. Aljoscha T. 🙏
❤️1
Lars S.
·
·
Hey Robert K. - Thanks a lot for the insights and the idea. Currently i am preparing an executive presentation at my company regarding our progress with sosafe. Analyzing the raw data helps a lot to gain further insights. 🙂 Sharing is caring (and as data owner i classified them as "non sensitiv" 😉 ) + "early hours" are critical + Monday is critical because of the weekends
💡
Melissa G.
·
·
Hi Lars S., thanks a lot for sharing. 🙌 Really interesting observations - the points about the “early hours” and Mondays are very insightful! A question to both you and Robert K.: Do insights like these influence how you plan or time your awareness activities or simulations? I’d be curious to hear whether you’ve adapted anything in your approach based on these patterns. Looking forward to your thoughts!💡 Kim H. René K. Arne B. feel free to chime in and share your thoughts too 🙂
Lars S.
·
·
Melissa G. - tbh I'm not entirely sure how to integrate these insights into my security measures. Adapting simulation activities to specific timeframes doesn’t seem right to me. At the moment, my thoughts are leaning toward incorporating them into my security communication strategy. I currently publish an internal security newsletter (Security Schnipsel) every month. I’m considering switching to something like a “Monday Morning Security Briefing.” However that would require a lot of effort. 🤔
💡1
Melissa G.
·
·
Security Schnipsel and Monday Morning Security Briefing sound really interesting, Lars S.! 🤩 So your idea would be to use the insights from employees’ click behavior for awareness communication — i.e., by highlighting these insights on Mondays? Curious to see if and how this evolves over time. 💡 And if you’d like to brainstorm or share ideas with other members, that would be great too! 💯