Phishing awareness training wears off after a few months

Security and phishing awareness programs wear off in time, and employees need to be re-trained after around six months, as per a paper presented at the USENIX SOUPS security conference last month.