Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale

Published

Author(s)

Shanee Dawkins, Jody Jacobs

Abstract

Organizations around the world are using the NIST Phish Scale (NPS) in their phishing awareness training programs. As a new metric for measuring human phish-ing detection difficulty of phishing emails, the use of the NPS by phishing training implementers across different types of organizations has not been formally evaluated. This poster presents the results of a study on the use of the NPS by organizations with established phishing awareness training programs. Initial results suggest that there are areas for improvement, but training implementers perceive the NPS as useful overall and an asset to their organizations' cybersecurity awareness pro-grams.
Proceedings Title
Proceedings of the Nineteenth Symposium on Usable Privacy and Security
Conference Dates
August 6-8, 2023
Conference Location
Anaheim, CA, US
Conference Title
Nineteenth Symposium on Usable Privacy and Security

Keywords

NIST Phish Scale, phishing, usable cybersecurity, cybersecurity awareness training

Citation

Dawkins, S. and Jacobs, J. (2023), How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale, Proceedings of the Nineteenth Symposium on Usable Privacy and Security, Anaheim, CA, US, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=956177 (Accessed September 26, 2023)
Created August 7, 2023, Updated September 14, 2023