3 ms·
Where I work there is training software that is somewhat effective at preventing phising - it actually sends out phising emails itself. Then employees who fall
by idoh 6y ago
Where I work there is training software that is somewhat effective at preventing phising - it actually sends out phising emails itself. Then employees who fall for it are given extra training (in a no fault sort of way).
- bawolff 6y agoPerhaps, but im also wary of these types of things, because i worry that people will feel embarassed at being tricked, and will (maybe subconciously) see the internal security team as the enemy, which is also a bad outcome. I also worry that the emails might not represent real attack emails, and we end up training users to identify the test emails but not real attack emails. (Not that i got any better solution)
- hutzlibu 6y agoNothing is 100% secure. Having users fail to spot a pishing mail, is a very good training on general awareness, but no guarantee, that they will not make misstakes under pressure.
- Thorrez 6y agoYep, I think that's a good thing. But I also think most employees will still fall for real phishing emails some of the time.