I'd agree with that, we all make mistakes, and I could see myself groggily waking up to some text message like that and clicking through it before my full criti

I'd agree with that, we all make mistakes, and I could see myself groggily waking up to some text message like that and clicking through it before my full critical faculties have come online. The folks who clicked through thought they were doing what they should. As regards reprimands - it does sound like a healthy culture, and I've seen and worked in thoroughly rotten environments with an equally rotten security culture. One example that sticks out, I worked in a utility company where IT would install a laptop desk lock and tie it to your desk. Then security would come by at night a few weeks later, lift the desk and remove the lock and laptop. The kicker was then they would issue a reprimand to the person who owned the laptop for failing to secure it. This was pure security theatre so people could justify their role.