Case Study: Cebu Pacific cuts its Phish-prone Percentage from 81% to 6% with KnowBe4
Key results
The challenge
Cebu Pacific, a Philippine low-cost airline, faced significant phishing exposure across its workforce. A baseline simulated phishing test conducted in 2017 revealed a Phish-prone Percentage of 81%, indicating a high likelihood that employees would click malicious links.
The solution
Cebu Pacific deployed KnowBe4 Security Awareness Training in 2017 and evolved from basic annual training into a customized program. This included an annual Security Awareness Proficiency Assessment (SAPA) and semi-annual awareness training delivered to more than 6,000 employees across geographies.
“With KnowBe4, we have reduced our PPP from a high of 81% to a mere 6% today. We've evolved from basic annual training to a comprehensive and highly customized program that's tailored to our needs.”
JCJan Kirby L. CruzManager for IT Governance, Risk and Compliance, Cebu Pacific
The results, in context
Cebu Pacific reports that its Phish-prone Percentage fell from 81% in 2017 to 6% by 2024. The program reached more than 6,000 trained and tested employees and achieved a 96% completion rate for SAPA testing.