How to View Simulation Results

You've created your phishing simulation, selected your audience, and launched your campaign. Great work! 🎉 But there's one important question left: How did your organisation respond?

Did employees open the email? Did anyone click the simulated link? Did anyone report it as phishing?

Encrisoft helps you explore these interactions so you can understand your campaign's performance and identify opportunities to strengthen your organisation's security awareness.

Let's find those results!

Step 1: Find Your Simulation

Ready to see how your phishing simulation performed? Let's find your campaign first!

Sign in to Encrisoft and click Simulations in the sidebar. This opens the Simulations page, where you'll find your organisation's existing campaigns, along with their status, recipient information and launch dates.

To find the campaign you're interested in, you can:

• Search: Enter the simulation name in the Search simulations... field.
• Filter by status: Use All statuses to narrow down the list by campaign status.
• Sort by date: Use Created date to organise the campaigns by their creation date.

Once you've found your campaign, look across its row to confirm you're opening the correct one. Then click the eye icon under the Action column to view its details and explore the results.

And just like that, you're one click away from finding out what happened!

Step 2: Explore Your Simulation Overview

Once you open a simulation, you'll land on its details page. This gives you a quick overview of the campaign and its recorded activity.

At the top of the page, you'll see your campaign name and its current status. For example, Completed indicates that Encrisoft has marked the campaign as completed.

You'll also see summary cards showing key activity recorded during the simulation:

• Sent: The number of simulation emails sent to recipients.
• Opened: The number of recipients who opened the simulation email.
• Clicked: The number of recipients who clicked the simulated link.
• Reported: The number of recipients who reported the email as suspicious.
• Submitted: The number of recipients who submitted information through the simulated phishing page.

These figures give you a quick snapshot of what happened during your campaign.

For example, if the cards show one email sent and opened, with zero clicks, reports, and submissions, you'll know that the email was opened but no further activity was recorded in those categories.

Remember: These figures describe activity during this particular simulation. They are not a complete measure of an employee's overall security awareness.

Step 3: Check Your Simulation Targets

Want to know how individual recipients interacted with your simulation? The Targets tab is the place to look.

1. Open your simulation.
2. Click the Targets tab.
3. Review the recipient information displayed in the table.

Depending on the information available, the table may show details such as email addresses, departments, response or delivery statuses, and training information.

For example, a recipient's status might show Opened, indicating that the email was opened.

However, opening an email does not automatically mean that someone fell for the simulation. The next step is to review the other recorded interactions, such as clicks, submissions, or reports, where available.

Use this information to understand how recipients interacted with the campaign and identify areas where additional awareness training may be useful.

Step 4: Understand Your Simulation Results

Now for the numbers that help you understand how your campaign performed!

1. Open your simulation.
2. Click the Results tab.
3. Review the rates and any explanatory information displayed on the page.

The results help you understand how recipients interacted with the simulated phishing email.

Here is what the key metrics mean:

• Open rate: The proportion of recipients who opened the simulation email. An open alone does not mean someone fell for the simulation.
• Click rate: The proportion of recipients who clicked the simulated link.
• Submit rate: The proportion of recipients who submitted information through the simulated phishing page.
• Report rate: The proportion of recipients who reported the simulation email as suspicious or phishing.

These metrics can help you identify patterns in employee behaviour.

For example, a high click or submit rate may indicate that certain phishing techniques need more attention during future awareness training. A higher report rate can indicate that recipients are recognising and reporting suspicious messages.

What if your results show a 100% open rate but 0% for clicks, submissions, and reports?

This means the email was opened, but no clicks, submissions, or reports were recorded. It is a useful starting point for understanding the campaign, but you should consider the results alongside other relevant information before drawing conclusions.

Remember, the goal is not to judge employees based on a single simulation. It is to understand where your organisation can improve and use that information to make future security awareness training more effective.

Step 5: Follow Your Simulation Timeline

Want to know what happened and when? Head to the Timeline tab!

Click Timeline to view the sequence of recorded events associated with your campaign.

In your screenshot, the timeline includes events such as:

• Campaign created: When the simulation campaign was created.
• Link target configured: When the simulation's link destination was configured.
• Campaign launched: When the simulation was launched.
• Campaign completed: When the campaign was marked as completed.
• First email opened: When the first email-open event was recorded.

Each event includes associated date and time information, helping you follow the campaign's progress from creation to completion and recipient interaction.

The timeline is particularly useful when you want to understand the order of events rather than just look at the final numbers.

Make Every Simulation Count!

Your simulation has given you a clearer picture of how your organisation responds to phishing attempts. By reviewing your targets, results, and timeline, you can spot areas for improvement and plan more effective security awareness training.

Celebrate the wins, learn from the gaps, and keep helping your team recognise suspicious messages.

After all, the real win isn't just good numbers on your dashboard; it's an employee pausing over a suspicious email and thinking, "Hmm, something doesn't look right!" before clicking. Now, that's a result worth celebrating!