Why should we run phishing simulations?

94% of breaches start with phishing. Simulations reduce click rates by up to 90% (Proofpoint data). They train users to spot BEC, impostor emails, and ransomware lures.