Metrics
What is suspicious email reporting rate?
Also called SERR.
The percentage of people who report suspicious messages instead of ignoring or clicking them.
In more detail
SERR captures the behavior that actually helps during a real attack. Click rate measures failure on one simulation; SERR measures whether a genuine attack would surface fast enough to act on.
Why it matters
It is the one number that maps to incident cost rather than to training attendance.
Hook Security’s position
Hook Security treats SERR as the primary program metric.
Related terms
The percentage of people who reported a suspicious message rather than ignoring or clicking it.
The percentage of people who clicked the link in a simulated phishing email.
The average time between a phishing email arriving and the first person reporting it.
The likelihood that everyday human behavior leads to a security incident.
Vocabulary is the easy part. Behavior is the job.
Thirty minutes, a live account, and a straight answer about where your people actually stand.