If a single click on a phishing email can ruin the entire company, the blame doesn’t lie with that individual.

  • @[email protected]
    link
    fedilink
    294 months ago

    We have test-phishing mails sent by our IT-Sec team on a regular basis. There’s usually an obvious one and a better made one. First round 10% clicked the obv. one, 99% the good one.

    We had a lot of trainings after that.

    Last year the numbers went down to 5% and 80%.

    If your security concept relies on both of these numbers being zero, you’re an incompetent hack trying to shift the blame on end users instead of doing your job.