Holm Security Phishing Simulation & Awareness Training is a module within the Holm Security Vulnerability Management Platform (VMP) designed to reduce human-layer risk by exposing users to simulated phishing attacks and delivering automated security awareness training based on their responses. The platform supports multiple phishing attack types including standard phishing, spear phishing, and whaling (CFO/CTO fraud). Ready-made email and web templates are provided for running simulations. When a user interacts with a simulated phishing email, they are automatically enrolled in tailored awareness training delivered in a nano-learning format — short, bite-sized video content followed by knowledge verification quizzes. Each user is assigned an individual risk score that reflects both their behavior in phishing simulations and their training performance. A lightweight endpoint software agent links users to their specific computers, enabling the platform to incorporate computer vulnerability data into the overall user risk score. This combined view of user behavior and system vulnerabilities allows organizations to prioritize remediation efforts more accurately. Administrators can monitor risk levels across individual users and user groups, track resilience trends over time, and repeat simulation and training cycles to maintain ongoing user awareness. Training content is available in multiple languages. The product supports compliance with NIS2, PCI DSS, and ISO 27001 requirements related to cyber hygiene and employee security awareness.