SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-repeat-training

CISA says employees need phishing training how often?

At regular intervals, because attackers keep improving.

Start playing free

  1. Once, on the first day
  2. Repeated at regular intervals ✔
  3. Only after a breach

Why: Scams change all the time, so one video is not enough. Short, regular refreshers keep the warning signs fresh.

Huh, didn't know that: CISA also says most security breaches are avoidable if people are trained to spot phishing.

The dad joke
Phishing training is like flossing. Skip it and you'll see the problem later.
Like this card?
Play the game

References

Answer: Repeated at regular intervals. Scams change all the time, so one video is not enough. Short, regular refreshers keep the warning signs fresh.

  1. CISA: Teach Employees to Avoid Phishing www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
    employees need to repeat training at regular intervals to learn about the latest scams.
    Checked 2026-10-10.
  2. CISA: Teach Employees to Avoid Phishing www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
    Be sure employees know how and to whom to report suspicious emails or phishing attempts.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhat should every employee know, according to the FTC?Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?Security & PrivacyA website shows a padlock and https. What does that tell you?

That's stuff everyone should know.