Skip links and keyboard navigation

Help shape the For government website by joining our user research panel.

Phishing attack simulations

Phishing simulations can help train your employees to proactively identify and react to phishing attempts reducing the probability of real-world attacks.

The Queensland Government Cyber Security Unit provides training tools, resources and a managed phishing simulation service to help increase your cyber security strength.

Phishing simulation tools

To help safeguard sensitive data and maintain the integrity of public services, there are a suite of phishing simulation training resources available. Phishing training allows agencies to strengthen their cyber security by educating employees on the identification and management of malicious social engineering attempts. Investing in ongoing phishing awareness keeps cyber security employees are up to date with the latest tactics and prevention strategies.

Managed phishing simulation service

The Queensland Government Cyber Security Unit provides a managed phishing simulation service, where a phishing expert conducts cyber security phishing campaigns on behalf of your agency. This service is designed to enhance your agency’s cyber security posture by simulating advanced phishing attacks in a controlled environment, helping employees learn to identify and report such attempts.

Using the phishing simulation tool, you will upskill your technical training capabilities.

  • Send simulated phishing attacks using pre-built, modified, or custom created templates.
  • Auto enrol employees requiring more practice on simulated attack campaigns, into targeted training modules.
  • Generate reports on phishing campaigns and keep track of high-risk employees in your organisation.
  • Send training and knowledge assessments on important cyber security topics to your employees.
  • Access a wide variety of training modules that can be integrated into most learning management systems.

Engaging the managed phishing service provides specialised expertise and up-to-date knowledge of the latest phishing tactics, ensuring a credible and high-quality simulation. The service removes internal resource constraints by managing all aspects of the campaign, from design and execution to detailed reporting. This tailored approach allows simulations to be customised to be aligned with your agency's needs and threat landscape.

The phishing attack training and simulation service enables Queensland Government to improve cyber security maturity and meet their Information security policy (IS18:2018) obligations.

All government agencies and related bodies are eligible to access this service.

Entity typeEligibility Cost
Queensland Government agenciesEligibleNo cost
Statutory bodiesEligibleNo cost
Local governmentEligibleNo cost
Government owned corporationEligibleOn application

Email the Queensland Government Cyber Security Unit at cybersecurityunit@cyber.qld.gov.au.

Join the Security technical leads community of practice, to connect with colleagues, access past phishing campaigns and other agency phishing material.