In your enterprise, would you advocate a “penalty” for employees who repeatedly fail “test” phishing attacks?

Yes, revoking security privileges. [55 votes] (20%)

Yes, such as performance reviews. [26 votes] (10%)

I advocate additional security education instead. [111 votes] (41%)

No, I prefer positive reinforcement, such as rewards for reporting phishing emails. [38 votes] (14%)

No, there is no official response – positive or negative – to our phishing testing. [6 votes] (2%)

We do not use in-house phishing tests. [34 votes] (13%)

Sign-up to receive top management & result-driven techniques in the industry.

Design, CMS, Hosting & Web Development :: ePublishing