We recommend conducting an unannounced, baseline phishing test in order to get the most accurate results.
By not announcing the test in advance, you can see how vulnerable your organisation would be if a real phishing attack made it through your email filters.
Having this insight can help you gain buy-in from your stakeholders.
Related Articles: