The phishing simulations alone justified the investment. Within 90 days our click-through rate dropped from 31% to under 5%.