• krashmo@lemmy.world
    link
    fedilink
    arrow-up
    20
    ·
    15 hours ago

    My company sends at least one fake phishing email a week. They track stats for them on a security page and I wear it as a badge of honor that my report says 100% viewed and 0% reported.

    • criticon@lemmy.ca
      link
      fedilink
      arrow-up
      9
      ·
      14 hours ago

      My company makes you take a course of you fail one or if you ignore 4 or 5 so I have the highest reporting record of the company just because of how much I hate that course

      • krashmo@lemmy.world
        link
        fedilink
        arrow-up
        9
        ·
        14 hours ago

        I think they do that at my company too but in addition to not reporting phishing emails I have a personal rule that I don’t do any “mandatory” training unless someone in my management chain specifically asks me to. My boss probably gets annoyed by that occasionally but you’d be surprised how much of that stuff I never get asked about.

        • aksdb@lemmy.world
          link
          fedilink
          arrow-up
          4
          ·
          12 hours ago

          Last year our CISO personally reached out to me and asked me to do the course that’s overdue. I was a little nervous for a second and decided to obey.

          • krashmo@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            9 hours ago

            Yeah that’s a good call. I don’t push back when asked directly I just pretend I didn’t see the emails. Most of the time it’s fine but the boring security stuff is usually the one they get me on.

        • criticon@lemmy.ca
          link
          fedilink
          arrow-up
          3
          ·
          12 hours ago

          Nice. My company ties the bonus payment to completing all the mandatory training. You get many reminders from HR when the bonus payment is approaching