Simulated Phishing: If the results of the assessment aren’t enough, show how vulnerable they are to cyberattacks with a simulated phishing campaign. Even one employee falling for a false attack should be enough to worry them and ask for your support.