Phishing awareness training wears off after a few months

Retraining employees after six months is recommended.