Phishing simulations failure rates global 2022

A 2022 survey found that the most critical departments, such as development, research & development, supply chain, and management, demonstrated the highest failure rate for phishing simulations. The security and information technology departments had the lowest rate.

Average failure rates for simulated phishing attacks in worldwide organizations in 2021 and 2022, by department

Characteristic	2022	2021
Development	13%	-
Research and development	12%	10%
Supply chain	11%	10%
Management	11%	10%
Legal	11%	9%
Marketing	11%	10%
Facilities	10%	9%
Sales	10%	10%
Finance	10%	9%
Human resources	10%	10%
Logistics	10%	8%
Administration services	10%	9%
Project management	9%	11%
Operations	9%	11%
Audit	9%	6%
Communications	9%	9%
Customer service	9%	8%
Maintenance	8%	12%
Production	8%	11%
Quality	8%	12%
Warehouse	8%	10%
Accounting	9%	10%
Engineering	9%	11%
Purchasing	8%	12%
Security	8%	8%
Information technology	7%	6%

Loading statistic...

Download

Source

Show detailed source information?

Already a member?

Source

Use Ask Statista Research Service

In cooperation with

Release date

March 2023

More information

Region

Worldwide

Survey time period

2021 and 2022

Supplementary notes

Data is based on a survey of 7,500 working adults and 1,050 IT security professionals across 15 countries worldwide.

The source adds the following information regarding the phishing simulations and failure rates measurements:
"Among our customers, three-quarters of departments were involved in 474 campaigns, receiving 6,000 messages or more in 2022 with almost 800 templates."

"Development" was added in 2022 survey.

Citation formats