Question 1

Why is security awareness training important?

Accepted Answer

Research suggests that more than 90% of cyberattacks involve human error. An
ill-advised action on the part of an employee may open the door to an attack, no
matter how strong your defenses are. Security awareness training addresses these
risks by familiarizing employees with the nature of cyberattacks and ways to
identify and prevent them.

Question 2

How does security awareness training help reduce the risk of a data breach?

Accepted Answer

Security awareness training helps employees recognize risky behavior before it
leads to a data breach, especially in situations involving suspicious links,
unsafe sharing, or social engineering attempts.

Question 3

How does security awareness training support security operations?

Accepted Answer

Security awareness training strengthens security operations by reducing
preventable incidents, improving employee reporting during a phishing attack,
and helping teams respond more effectively to evolving cybersecurity threats
through ongoing security training.

Question 4

Does Mimecast measure security awareness beyond just who clicked a simulated phishing email?

Accepted Answer

Yes. Mimecast scores behavior across real risk categories, not just
click-through, so you can see who's actually driving risk before it causes an
incident, not just who failed one test.

Question 5

Are Mimecast's phishing simulations based on real attacks, or generic templates?

Accepted Answer

Mimecast turns live phishing attacks hitting your organization into simulations.
AI generates custom lures by attack type, industry, and difficulty, so employees
train against what's actually targeting them, not a static template library.

Question 6

What kind of reporting does Mimecast provide to show training impact to leadership?

Accepted Answer

Mimecast reports completion and knowledge-gap tracking alongside per-user risk
scores, built to show improved security posture, not just attendance. That's the
kind of reporting designed to hold up in front of a board, not just live in an
internal dashboard.

Question 7

What happens after an employee fails or falls for a simulated phishing test?

Accepted Answer

That result flows into their individual risk score, and targeted remediation is
assigned based on the specific gap the simulation revealed, not a generic
follow-up course. It also feeds the broader reporting that shows which employees
and departments need the most attention.

Question 8

How does Mimecast use AI to build phishing simulations, and can it adapt to our industry or difficulty level?

Accepted Answer

Mimecast turns live phishing attacks hitting your organization into simulations,
and AI generates custom lures based on attack type, industry, and difficulty.
That means employees train against what's actually targeting your business, at a
level that can scale as they improve.

Security awareness training solution

Why security awareness training matters

Forrester Wave: Human Risk Management Solutions

Complete Protection

Real business results

Questions? We've got answers.

Security awareness training solution

Why security awareness training matters

Forrester Wave: Human Risk Management Solutions

Complete Protection

Real business results

Questions? We've got answers.

The consequences of weak security awareness

GenesisCare & Mimecast: Building a culture of cyber resilience in healthcare

Reduce human risk

Identify at-risk users

Improve retention

Validate security gains

Strengthen culture

Ready to get started?

Go beyond the click rate

Training people will actually finish

Simulations built from live attacks

Reporting your board will read