One thing to understand about phishing is that it isn't necessarily from outside. Our (large) company recently had a sort of big (we think) leak of internal so

One thing to understand about phishing is that it isn't necessarily from outside. Our (large) company recently had a sort of big (we think) leak of internal source code from a GitHub Enterprise server - done by an internal person who DL'ed a bunch of code and put it outside. Basically no security system in the world would have stopped that, as long as we think the idea of sharing source code internally is a good idea. So yea - the guns all point out, and if anyone inside your organization ever tries to phish you, there's a good chance you'll never see it coming.