I work at a big company with 10,000+ employees (only 100s of software people, mainly sales people). We get phished probably once a year no lie. You've got older

I work at a big company with 10,000+ employees (only 100s of software people, mainly sales people). We get phished probably once a year no lie. You've got older folks working HR departments and someone gets an email like. from: jim.bob.sales@bigcompony.com "hey cindy it's bob your bosses boss boss. I forgot my password and have a MAJOR presentation coming up. Can you give me yours for login so i can see our powerpoint?"