Egedal Municipality reduces click rate from 19% to under 4%
With Moxso, Egedal Municipality made phishing training a natural part of everyday work, significantly reduced its click rate, and gained tangible results to demonstrate the impact to senior management.
- Industry
- Public sector
- Organisation type
- Danish municipality
- Moxso solution
- Phishing simulations and employee training
About Egedal Municipality
Egedal Municipality has a significant responsibility to protect citizens’ data and ensure that employees can identify and respond to cyber threats in their day-to-day work. As Head of Digitalisation, Tanja Sørensen Vest is responsible for the municipality’s security awareness efforts and for ensuring that the organisation meets requirements for training and information security.
Egedal Municipality wanted a cybersecurity programme that would drive real behavioural change without adding more administration. With Moxso, the municipality made phishing training a natural part of everyday work, significantly reduced its click rate, and gained tangible results to demonstrate the impact to senior management.
Cybersecurity training needs to work in practice
Egedal Municipality did not want another system. They wanted a solution that would make it easier to manage security awareness across the organisation. Their previous awareness platform required significant administration and preparation, making it difficult to use effectively in practice.
The municipality therefore needed a solution that could keep cybersecurity top of mind all year round, without creating more work for IT and those responsible for security awareness.
We could see that the system we had purchased simply wasn’t working for us. It required too much administration on our side, and the value didn’t justify the amount of time we had to spend on it.
Realistic phishing with minimal administration
Egedal Municipality started with Moxso’s phishing simulations. The first campaign was launched without prior warning to establish a realistic baseline and provide an accurate picture of the organisation’s resilience.
The simulations quickly made phishing part of the internal conversation. Employees began discussing suspicious emails, reflecting on why they had clicked, and becoming more aware of the warning signs they had previously overlooked.
At the same time, the solution required only limited involvement from IT during implementation and virtually no ongoing administration.
Documented impact - and a foundation for building further
The click rate dropped from approximately 19% to under 4%, while phishing and cybersecurity became a more natural part of employees’ everyday work.
The results also gave Egedal Municipality something tangible to show senior management: the security awareness programme was clearly making the organisation more resilient.
After almost two years of positive results with Moxso’s phishing simulations, the municipality decided to expand the partnership and bring phishing and security awareness together on Moxso’s platform.
Start somewhere. For us, phishing was a good place to begin. It required very little from us but quickly delivered value. Once we saw the impact, building further on the partnership was the natural next step.
