This survey assesses employees’ resilience to phishing and suspicious messages: how often they encounter such attempts, how confident they are in recognizing risks, what actions they take, how clear and convenient the reporting/escalation process is, and which measures would best reduce risk (training, prompts, tools, communications).