State of Cybersecurity Awareness
4th Edition · 2026 Report. Human Awareness in the Age of AI Phishing — how phishing simulation outcomes and employee training engagement are shaping organizational resilience across the Kingdom.
Inside the 4th Edition
Phishing simulation activity rose 40% year over year — yet the click rate held at 28%. Here is what the data says about the human layer of defense.
1 in 4 employees clicked a simulated phishing link, with AI-generated templates driving a further 2% increase.
Phishing simulation activity grew year over year, averaging 10+ campaigns per organization.
Of users who clicked, 8% went on to enter their login credentials on a fraudulent page.
A 12.8% improvement, while nearly 40% of users still took more than 3 hours to report.
Up from 66%, with active users growing 54.8% and inactive users falling 25.8%.
Training module completion improved from 28.2% in the previous period.
Download the Full 4th Edition Report
Human Awareness in the Age of AI Phishing — the complete 2026 analysis of phishing simulation outcomes, reporting behaviour and training engagement, with the SANS Awareness Maturity Model. Available now for free download (PDF).
