Having trained more than 3.1 million employees (using PhishMe.com) at universities, government agencies, and large enterprises, we have found that immersing people in the experience through mock phishing exercises, and presenting immediate, bite-sized educational to those who are susceptible has had the desired effect of reducing human vulnerability to these attacks.