Simulating malicious emails to educate end users on-demand

Many organizations are very vulnerable to malicious emails. To protect end users from such, this paper discusses how a simulation exercise can be successfully conducted to educate vulnerable users on-demand. By simulating malicious emails and `catch' vulnerable users, the organization may reduce costs and time regarding mitigating the weakest link-the human being.