Assess how well your organisation would detect, report, and withstand a phishing or business email compromise attack.