## 4 Discussion
### Recommendations for Future Research  
The findings of this review reveal several important directions for future research on phishing susceptibility. One critical area is the need for studies with larger and more diverse sample sizes. Current research often relies on small participant pools, which limits the ability to generalize findings across different demographics, professional groups, and cultural contexts. Broader samples would help uncover variations in phishing susceptibility and provide more robust insights into user behavior. Another major limitation is the lack of comprehensive data on contextual factors such as organizational culture, technical infrastructure, and the availability of training programs. These elements play a crucial role in influencing susceptibility to phishing attacks, yet they are often overlooked in existing research. Addressing these contextual factors could provide a more holistic understanding and inform strategies tailored to organizational and individual needs. The diversity of phishing campaigns is another area that demands greater attention. Future studies should examine a broader range of phishing scenarios, including more sophisticated and evolving tactics such as spear phishing and business email compromise. This diversity is crucial for evaluating the effectiveness of interventions and preparing users to handle a wider variety of phishing attempts. A significant gap in the literature concerns the long-term impact of interventions and awareness programs. Many studies focus on immediate behavioral outcomes without assessing whether these changes are sustained over time. Longitudinal research is needed to determine the persistence of behavioral changes and the role of reinforcement strategies, such as periodic training or simulated phishing tests, in maintaining user vigilance. In addition, a deeper exploration of the interplay between psychological traits, such as trust, emotional responses, and cognitive biases, and user behavior is necessary. This could help identify key factors that contribute to phishing susceptibility and guide the development of more targeted and effective interventions. Research should also examine how these psychological and behavioral factors vary across different contexts and demographics. To effectively mitigate phishing email attacks, it is essential to design tailored training programs that address the specific needs and behavioral tendencies of users. As [37] suggests, improving current training approaches is crucial to effectively addressing susceptibility factors. One such approach is delayed-response training, which is particularly beneficial for impulsive users who may fall victim to phishing attacks due to hasty decision-making. This method involves training users to take a pause before responding to emails, encouraging a delay in action that allows time for careful review of the message's legitimacy. By integrating exercises where users are prompted to wait a few seconds before responding to suspicious emails, impulsive behavior is curbed, fostering critical thinking and verification of message authenticity. Similarly, as [33] highlights, understanding users' vulnerabilities is key to strengthening cybersecurity and developing targeted training strategies. Contextual awareness training is another effective approach, focusing on educating users about the various phishing tactics commonly employed in different environments, such as corporate or social settings. By simulating realistic scenarios, users can learn to recognize subtle cues and inconsistencies in email communications that may indicate phishing attempts, including domain spoofing, unexpected attachments, and urgent requests for personal information. Furthermore, as [47] suggests, enhancing organizational resilience against phishing attacks requires dedicated training programs that improve security awareness. Personalized feedback training, for instance, provides users with individualized insights based on their unique interaction patterns with emails.