If a single click on a phishing email can ruin the entire company, the blame doesn’t lie with that individual.

  • @Graz@feddit.de
    29•2 months ago

    We have test-phishing mails sent by our IT-Sec team on a regular basis. There’s usually an obvious one and a better made one. First round 10% clicked the obv. one, 99% the good one.

    We had a lot of trainings after that.

    Last year the numbers went down to 5% and 80%.

    If your security concept relies on both of these numbers being zero, you’re an incompetent hack trying to shift the blame on end users instead of doing your job.

    • @cron@feddit.orgOP
      13•2 months ago

      Thank you, that was my point! Shifting the blame on the user doesn’t help anyone.