Cybercriminals are adept at developing phishing campaigns that target employees. Therefore, organizations should also establish dedicated phishing campaigns to counteract these malicious attacks. Additionally, a phishing campaign should take certain phishing factors into account; for example, will your test phishing email include: malicious links, malicious attachments, malicious websites.