NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale
Published
Author(s)
Shanee Dawkins, Jody Jacobs
Abstract
Organizations around the world are using the NIST Phish Scale (NPS) in their phishing awareness training programs. As a new metric for measuring human phish-ing detection difficulty of phishing emails, the use of the NPS by phishing training implementers across different types of organizations has not been formally evaluated. This poster presents the results of a study on the use of the NPS by organizations with established phishing awareness training programs. Initial results suggest that there are areas for improvement, but training implementers perceive the NPS as useful overall and an asset to their organizations' cybersecurity awareness pro-grams.
Proceedings Title
Proceedings of the Nineteenth Symposium on Usable Privacy and Security
Conference Dates
August 6-8, 2023
Conference Location
Anaheim, CA, US
Conference Title
Nineteenth Symposium on Usable Privacy and Security
Dawkins, S.
and Jacobs, J.
(2023),
How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale, Proceedings of the Nineteenth Symposium on Usable Privacy and Security, Anaheim, CA, US, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=956177
(Accessed October 6, 2025)