Planet Money episode #886: The Price of a Hack [1] interviews a supervisor at a company who instituted required anti-phishing training, with good results.

[1]: https://www.npr.org/templates/transcript/transcript.php?stor...

My brother used to do work for a large medical device company and they used to run these tests every quarter.