Most phishing training programs have probably experienced an inexplicable variety of click rates. But, considering click rates as the sole metric for a phishing awareness program’s effectiveness is like fishing without a net. This session will provide real-world examples for attendees to learn how the NIST Phish Scale is a metric incorporating the human element to contextualize click rates.