Yup. For anyone who is a security type IT person at your company, make sure you send out bogus phising emails to employees to see who falls for it and what type

Yup. For anyone who is a security type IT person at your company, make sure you send out bogus phising emails to employees to see who falls for it and what type of data they give away. At my work if you fall for it the first time then you get training not to do it again. If you fall for it a second time, terminated. They just consider it to be too high of a security risk to keep you around if you fall for it a second time.