Technical Anshu
Tutorials Blog
📈 Training and Trends

Follow Up With Five Minute Training and Measure the Trend Over Quarters

Programmes that only send fake email are measuring machines. Programmes that follow up are teaching machines. This page covers the five-minute rule, who gets what after a round, and how to read progress across quarters without fooling yourself.

✍️ Technical Anshu📈 Follow Up and Measurement⏱️ Trend over quarters is the KPI
🎥 Watch the full video - the phishing simulation setup shown step by step

Ask what a simulation programme produces and the honest answer is not a click rate - it is a change in behaviour over time. That change is manufactured in the follow-up, and it is only visible in the trend. Both halves are cheap; skipping either one quietly wastes the whole exercise.

Four rounds at steady difficulty (example trend)
Q1 clicked24%
Q2 clicked19%
Q3 clicked14%
Q4 clicked11%
Q4 reported57% reported
Example values at a steady difficulty level. The two honest signals of a working programme: clicks drifting down across quarters while reports climb - the Q4 reported bar is the one to frame.
1

The five-minute rule

The follow-up module lands within days of the click, while the embarrassment and the lesson are still warm, and it takes about five minutes - the exact checks that this round's email tested, shown on that email. Long annual courses do not change behaviour; short, immediate, specific lessons do. Completion is tracked like any training, kindly and without drama, and the module ends by rehearsing the report button one more time.

2

Different follow-up for different results

  1. Clicked: the module, plus the private coaching conversation if they also clicked last round.
  2. Reported: a thank-you and the one-minute refresher - reward the behaviour publicly in aggregate, never by naming in a leaderboard.
  3. Neither: the all-staff summary covers them; silence is a normal result, not a suspicious one.
  4. Everyone: the round-up note with totals, the lesson, and the date window of the next round.
3

The trend is the KPI - read it honestly

Chart two lines per quarter, at a steady difficulty class: clicked rate and reported rate. Expect noise - a holiday month, a harder scenario, a new department joining. One round proves nothing in either direction; four rounds tell the truth. The healthy signature is unglamorous: clicks drifting down, reports drifting up. If clicks refuse to move, change the teaching before blaming the staff - check difficulty, mail volume per role, and whether the report route is genuinely one click, because a hard-to-report culture hides inside a bad click rate.

4

Refresh the programme every year

Retire templates everyone now passes, raise difficulty one notch for groups that ace their rounds, rotate the scenario families so the office practises range rather than one trick, and re-read the ethical rules with HR once a year - the excluded cruel lures, the no-password rule, the aggregate reporting. Programmes stay welcome in a company exactly as long as they stay visibly fair; the annual review is how you keep that true on paper as well as in spirit.

🔴 Report the trend, not the round. A single quarter's click rate invites panic or complacency; four quarters of clicks easing down and reports climbing is a security culture you can show the board - and it is the only chart in this programme worth framing.

🎥 Watch the Complete Video

Watch the video run a full campaign cycle - build, send and review - from start to finish.

▶️ Watch Full Video
❓ Common Questions (FAQ)

How soon after a click should the training arrive?

The landing page teaches instantly at the click. The follow-up module should land within a few days, while the memory is fresh - a module that arrives a month later is homework, not feedback.

Our click rate is not falling. Is the programme failing?

Not necessarily. Check difficulty creep, how much mail each role handles, and whether reporting is genuinely easy before concluding anything about people. Often the fix is a simpler report route or a fairer template - not more pressure.

Should we publish the trend to all staff?

Yes, in aggregate. A visible, improving trend is the programme's best advertisement - it shows the training working, thanks the reporters by implication, and makes the next round feel like a team sport instead of an inspection.

This guide is based on the phishing simulation video by Technical Anshu • Stuck on a step? Ask in the video comments - you will get an answer there 🙏