Social engineering and phishing attacks have become more prevalent and as a result, companies are starting to adopt measures for SE testing and phishing. This growth in demand for these services has led to uncertainty on how to charge for these security measures.