The role of individuals in defending against cyber risks is a crucial factor. Raising employee awareness remains one of the most critical responsibilities for IT managers and security officials. Specialised providers have made it their objective to deliver effective learning platforms and design trainings that take into account people’s decreasing attention spans. Security training is usually combined with phishing simulations, which can be used for direct testing. In our whitepaper, we present the key findings of the current CyberCompare market study (June 2023).