The training happened. The attendance sheet was filed. The click rate did not move. Here is why.

Institutions run the session, collect the attendance sheet, file it for audit and then see exactly the same click rates the following quarter. The training happened. The behavior did not change.
Three things usually explain it. The session is annual, the content is generic, and it was written by technical people for technical people.
A finance officer in Kampala does not need a lecture on ransomware architecture. She needs to recognize the exact wording of a supplier bank detail change request. A field officer does not need threat taxonomy. He needs to know what to do in the first ten minutes after losing a tablet holding beneficiary records. Relevance is what makes content stick.
Short and frequent beats long and annual. Ten focused minutes every month outperforms two hours once a year. Role specific content beats one deck for everyone. And simulation beats explanation, because people remember the message they fell for far better than the slide they watched.
Then measure it. Establish baseline click rates, run simulations, report results by department and train against what you find. Without measurement there is no way to tell training apart from theatre.
Replace annual with monthly
Write for roles, not for ICT
Simulate before you explain
Baseline and track click rates
Report results by department
Make reporting safe for staff
Nakawa, Kampala, Uganda
Uganda and East Africa
Onsite and remote
John Doe joined UHA
12 people registered today
ECG Interpretation Workshop