Dawkins, S.
and Jacobs, J.
(2023),
How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale, Proceedings of the Nineteenth Symposium on Usable Privacy and Security, Anaheim, CA, US, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=956177
(Accessed October 24, 2025)
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale
Published
Author(s)
,
Abstract
Organizations around the world are using the NIST Phish Scale (NPS) in their phishing awareness training programs. As a new metric for measuring human phish-ing detection difficulty of phishing emails, the use of the NPS by phishing training implementers across different types of organizations has not been formally evaluated. This poster presents the results of a study on the use of the NPS by organizations with established phishing awareness training programs. Initial results suggest that there are areas for improvement, but training implementers perceive the NPS as useful overall and an asset to their organizations' cybersecurity awareness pro-grams.Proceedings Title
Proceedings of the Nineteenth Symposium on Usable Privacy and Security
Conference Dates
August 6-8, 2023
Conference Location
Anaheim, CA, US
Conference Title
Nineteenth Symposium on Usable Privacy and Security
Pub Type
Conferences
Download Paper
Keywords
NIST Phish Scale, phishing, usable cybersecurity, cybersecurity awareness training
Citation
Issues
If you have any questions about this publication or are having problems accessing it, please contact [email protected].
Created August 7, 2023, Updated September 14, 2023