I did one of these phishing tests at a past job and the leadership wanted a list of who failed. I refused because it was just a drill, they knew they failed, and we had aggregated data to use for future analytics on training efficacy.
I love that all the reports and studies about this training are summed up as that it’s completely worthless unless you’ve had zero experience with it before.
Relying on individuals to do the right thing has never been a good way of assuredly preventing anything.
I did one of these phishing tests at a past job and the leadership wanted a list of who failed. I refused because it was just a drill, they knew they failed, and we had aggregated data to use for future analytics on training efficacy.
I love that all the reports and studies about this training are summed up as that it’s completely worthless unless you’ve had zero experience with it before.
Relying on individuals to do the right thing has never been a good way of assuredly preventing anything.