We recommend conducting an unannounced baseline phishing test in order to get the most accurate results.
By not announcing the test, you can see how vulnerable your organisation would be if a real phishing attack made it through your email filters. Having this insight can help you gain buy-in from your stakeholders.
Related Articles:
Top-level Buy-in for Your Awareness Campaigns