Should Failing Phish Tests Be a Fireable Offense?

The company’s training courses offer customers a way to track how many employees open the phishing email tests and how many fall for the lure. Rohyt Belani, CEO of Leesburg, Va.-based security firm Cofense (formerly PhishMe), said anti-phishing education campaigns that employ strongly negative consequences for employees who repeatedly fall for phishing tests usually create tension and distrust between employees and the company’s security team. Cofense provides a phish reporting system and encourages customers to have their employees flag suspected phishing attacks (and tests), and Belani said those employee reports can often stymie real phishing attacks.

Source: krebsonsecurity.com