Reported alongside the overall risk score. It combines simulation results and report rate to isolate the part of human risk tied specifically to phishing.
HRM glossary
PAS (Phishing Awareness Score)
A specific metric of how much a person or area recognizes and reports phishing.
Definition
PCI DSS 12.6 — PCI DSS v4.0 requirement on awareness programs that must include phishing.
Phishing simulation — A controlled lure to measure actual behavior, not the declared one.
QRishing — Phishing via QR code: the lure asks you to scan, not to click a link.
Ransomware (simulated) — A simulated attachment that would encrypt files, to measure the act of opening it without checking.
HRM glossary
Questions about PAS (Phishing Awareness Score)
What is PAS (Phishing Awareness Score)?
A specific metric of how much a person or area recognizes and reports phishing.
How does Whalemate use it?
Reported alongside the overall risk score. It combines simulation results and report rate to isolate the part of human risk tied specifically to phishing.
Want to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.