AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/sec-repeat-training

CISA says employees need phishing training how often?

At regular intervals, because attackers keep improving.

Start playing free

  1. Once, on the first day
  2. Repeated at regular intervals ✔
  3. Only after a breach

Why: Scams change all the time, so one video is not enough. Short, regular refreshers keep the warning signs fresh.

Huh, didn't know that: CISA also says phishing attacks are frequently preventable when you train employees to recognize and avoid suspicious messages.

The dad joke
Phishing training is like flossing. Skip it and you'll see the problem later.
Like this card?
Play the game

References

Answer: Repeated at regular intervals. Scams change all the time, so one video is not enough. Short, regular refreshers keep the warning signs fresh.

  1. CISA: Teach Employees to Avoid Phishing www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
    employees need to repeat training at regular intervals to learn about the latest scams.
    Checked 2026-10-10.
  2. CISA: Teach Employees to Avoid Phishing www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
    Phishing attacks are frequently preventable when you train employees to recognize and avoid suspicious messages.
    Checked 2026-10-12.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhat should every employee know, according to the FTC?Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?Security & PrivacyA website shows a padlock and https. What does that tell you?

That's stuff everyone should know.