## 3 Results
### Literature Classification
#### 3.2.3 Awareness, Training and Response to Phishing  
[PERSON] et al., in [29], revealed varying vulnerability rates, ranging from 7.4% to 30.7%, with repeated campaigns leading to decreased click rates, suggesting improved awareness over time. The findings underscore the need for continued training and phishing simulations, recommending targeted efforts to enhance cybersecurity measures. Similarly, the study [30] by [PERSON] et al. found that gender and PC usage duration affect phishing detection, with pop-up attacks being more successful. Cognitive biases, like the anchoring effect, also influence users' judgment of web page legitimacy. These findings highlight the role of demographics, time, and behavior in phishing susceptibility, suggesting that automated tools, training, and awareness campaigns can help reduce risks. Moreover, in [31], [PERSON] et al. identified rational decision-making and gender as significant predictors of good security behaviors, with financial risk-taking also influencing password generation behavior positively. The findings emphasize the need for tailored security solutions and training programs that consider these individual traits, highlighting the environment-specific nature of cybersecurity influences. Practical implications include using the results to develop targeted security measures at universities, while recommendations for future research advocate for replicating the study across diverse populations and conducting focused systematic reviews on individual differences in cybersecurity behaviors. Similarly, [PERSON] et al. in [32] found that 70.6% of students were vulnerable to phishing attacks due to a lack of awareness. Tests revealed that students often failed to identify malicious emails, exposing significant gaps in cybersecurity education. This highlights the importance of implementing improved cybersecurity awareness programs to educate students on recognizing and responding to phishing threats, alongside securing academic ICT infrastructures for safer email use. The review [35] by [PERSON] identifies a variety of factors that affect employees' responses to phishing, including perceived vulnerability, severity, rewards, shame, and countermeasures. It emphasizes the importance of socio-technical considerations in shaping behavior and compliance with email security policies. The review calls for security training programs that address both intrinsic and extrinsic motivators, recommending the integration of socio-technical elements into these programs to improve phishing awareness and vigilance. Future research should explore the effectiveness of these training approaches as well as the role of technological countermeasures in enhancing organizational cybersecurity. In a larger organizational context, the study [41] showed that age and computer skills significantly influence employees' vulnerability to phishing attacks, while gender was not a major factor. Job roles were identified as key determinants of susceptibility, and the research raised concerns over the effectiveness of voluntary embedded training. It also emphasized the value of crowd-sourced phishing detection for quicker campaign identification, suggesting that tailored cybersecurity strategies and collective vigilance within organizations are essential. In [42], [PERSON] et al. found that customized phishing emails greatly increased staff engagement, emphasizing the need for tailored cybersecurity training. However, challenges such as staff fatigue and heavy workloads complicate effective simulations. The study advocates for continuous staff training, improved technical support, and further research to optimize phishing simulation processes for healthcare environments. The study [43] by [PERSON] et al. reveals that executive functioning, particularly in judgment and decision-making, affects susceptibility to phishing across age groups. Itrevealed that older and younger adults both become suspicious about phishing at approximately equal rates.