3 ms·
When a new phishing test goes out everyone in my department announces to everyone else to watch out for it. So it's a bonding experience of the non-security pe
by Consultant32452 7y ago
When a new phishing test goes out everyone in my department announces to everyone else to watch out for it. So it's a bonding experience of the non-security people against the security people.
- smelendez 7y agoThat seems okay though, since it's also behavior you'd want if real phishing emails were coming in.
- btilly 7y agoNo. Because the department that has advance warning of internal tests will be unlikely to be the first targeted by real phishing emails.
- Benjammer 7y agoThis doesn't seem like much of a reason to try and dissuade employees from discussing these things though. I think there are probably a great many sysadmins, security analysts, and ciso's who can only dream of a day when run-of-the-mill employees are having casual conversations about phishing and identity security at the office.
- 4ntonius8lock 7y agoIt's silly to do it inhouse. It creates distrust. That is why you pay consultants. They send out the phishing test, and hopefully regular people bond with the security people in an effort to pass it. I mean, after all, security and regular people in the company should want the same thing (company success... which implies not giving away things to phishing probes)
- pbhjpbhj 7y agoYes, you don't want to create an environment in which people don't want to ask IT/opsec people for help for fear they will be getting themselves in trouble.