If a single click on a phishing email can ruin the entire company, the blame doesn’t lie with that individual.
28 points
We have test-phishing mails sent by our IT-Sec team on a regular basis. There’s usually an obvious one and a better made one. First round 10% clicked the obv. one, 99% the good one.
We had a lot of trainings after that.
Last year the numbers went down to 5% and 80%.
If your security concept relies on both of these numbers being zero, you’re an incompetent hack trying to shift the blame on end users instead of doing your job.
13 points