// GLOSSARY

Reporting Rate

The share of employees who notice a suspicious message in a social-engineering simulation and report it to the organization. Unlike the click rate, it measures not who was fooled but the defense's ability to be told, shifting the center of measurement from blaming the individual to assessing the organization's reflex. A high reporting rate means a greater chance that any abnormal contact entering the organization turns into an alarm, because a social-engineering attempt becomes a defensible incident only when it is noticed and passed on. A low rate may point less to a training gap than to a reporting channel that is invisible or burdensome. It is the numeric face of the detect-and-report reflex and carries meaning not alone but together with time-to-report.