This case study covers a phishing simulation assessment for a large hospitality conglomerate. The engagement measured employee awareness by targeting over 2,000 users with a realistic social engineering scenario. The assessment established a baseline click-through rate of ~10%, providing quantitative data for the client to benchmark their human risk and develop targeted remedial training.