you are viewing a single comment's thread
view the rest of the comments
[–] 46 points 2 days ago (7 children)

I've also never fallen for any of the phising emails the IT department sends to test me, my secret is almost never checking my email

  • source
  • parent
  • hideshow 7 child comments
  • [–] 21 points 2 days ago (6 children)

    My company sends at least one fake phishing email a week. They track stats for them on a security page and I wear it as a badge of honor that my report says 100% viewed and 0% reported.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 13 points 2 days ago (5 children)

    My company makes you take a course of you fail one or if you ignore 4 or 5 so I have the highest reporting record of the company just because of how much I hate that course

  • source
  • parent
  • hideshow 5 child comments
  • [–] 10 points 2 days ago (4 children)

    I think they do that at my company too but in addition to not reporting phishing emails I have a personal rule that I don't do any "mandatory" training unless someone in my management chain specifically asks me to. My boss probably gets annoyed by that occasionally but you'd be surprised how much of that stuff I never get asked about.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 2 days ago (2 children)

    Last year our CISO personally reached out to me and asked me to do the course that’s overdue. I was a little nervous for a second and decided to obey.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 days ago

    Yeah that's a good call. I don't push back when asked directly I just pretend I didn't see the emails. Most of the time it's fine but the boring security stuff is usually the one they get me on.

  • source
  • parent