Cybersecurity Drill Test Using Phishing Attack: A Pilot Study of a Large Financial Services Firm in Thailand
Surachai Chatchalermpun, Pongpisit Wuttidittachotti, Therdpong Daengsi · 2020
This paper presents a pilot study about cybersecurity drill tests within a large financial services company in Thailand using a phishing technique. After conducting simulation by sending phishing emails to more than 21,000 users nationwide, including executives and employees, it has been found that 73% of executives and 77% of employees ignored the phishing emails, whereas, 12% of executives and 15% of employees opened, clicked and filled-in the password. The numbers are higher than the result from earlier research provided by Verizon. Therefore, the result from this can be used to increase awareness and improve the cybersecurity within this organization by proposing the training program to their staff, as well as conducting the other cybersecurity drill tests in future work. Besides, this study can be an example for other companies to improve organizational cybersecurity.