Does your company do phishing simulations?

We found out that 10% of our users entered their password.