Phishing as a Cyber Security Threat

The aim of this article is to present the threat of phishing within the issue of cyber security and education as one of the tools to reduce it. The article presents procedures for verifying the level of awareness of this threat in a group of selected employees of medical facilities. These procedures consist of a theoretical and a practical part. The theoretical part defines the basic framework of phishing attacks. It describes the basic knowledge and definitions that need to be mastered to understand the given area. The practical part consists of testing the readiness of a specific reference group of users through phishing trainings and phishing tests. The data collected from the testing was further analyzed and compared to determine the potential use of phishing training and phishing testing in organizations.