State of Security Awareness 2025

State of Security Awareness 2025

Executive Summary

Our annual State of Security Awareness report provides comprehensive insights into global security awareness trends, challenges, and best practices. Based on data from over 500 organizations and 2 million employees, this 48-page report is the definitive guide to understanding the security awareness landscape in 2025.

Key Findings

1. Phishing Click Rates Continue to Decline

Organizations with mature security awareness programs have seen average phishing click rates drop to 4.2%, down from 7.8% in 2023. However, click rates vary significantly by industry and organization size.

2. AI-Powered Attacks Are Rising

We observed a 340% increase in AI-generated phishing attempts, with attackers using large language models to create more convincing and personalized attacks.

3. Training Frequency Matters

Organizations that provide monthly training see 52% better outcomes than those training quarterly or annually.

Industry Benchmarks

The report includes detailed benchmarks for:

• Phishing simulation click rates by industry
• Training completion rates
• Reporting rates for suspicious emails
• Time to report vs. time to click

Recommendations

1. Increase training frequency to at least monthly
2. Implement role-based training programs
3. Use realistic, adaptive phishing simulations
4. Measure and reward positive security behaviors
5. Integrate security awareness into onboarding

Related insights