If an employee clicks on a simulated phishing email, rest assured that no harm will come from that to your organization. Instead, the action may be recorded and brought to the attention of their security or IT department so that the employee may be provided instruction for how to avoid making the same mistake.