Employee susceptibility to phishing attacks dropped from 42.4% to just 5.2% in large retail organisations after one year of continuous training.