I've seen an interesting trend at multiple companies. The security team starts sending phishing emails to the employees and if you get phished you have take a t

I've seen an interesting trend at multiple companies. The security team starts sending phishing emails to the employees and if you get phished you have take a training. Simultaneously, HR and executives send company wide emails from third party domains because security won't let them setup email tools on the main domain. As a result, employees start reporting HR and executive emails as phishing and lots of corporate communication breaks down.