// GLOSSARY

Detect-and-report Reflex

An employee's reflex to notice a social-engineering attempt and report it to the organization; it is the primary evidence object of the Social Engineering Simulation. Human-layer measurement was long locked onto the wrong question: 'how many clicked?' Yet what saves an organization in a real incident is not that no one clicked; in a large enough organization someone eventually does. What saves it is how fast the person who clicked or grew suspicious reports the situation. The detect-and-report reflex measures this second ability and shifts the center of measurement from blaming the individual to assessing the organization's defensive reflex. The click rate is in this frame only context data; the decision object is how many sounded the alarm and how quickly. It is read together with time-to-report and the correct-escalation percentage. The frame is deliberately reflex-building, not blaming; the aim is not to catch an employee but to turn the organization into an early-warning system.