We assign focused training to the specific people who need it, addressing the exact behavior the simulation exposed. No one sits through generic security videos unrelated to what actually happened.
Untargeted, one-size-fits-all training rarely changes behavior. Remediation tied to a real, observed failure is far more likely to stick, and it's far easier to justify to leadership.
A written record of who was assigned training and what they completed. Documentation your client can point to during a security review.