Timeline for Company does not want any names on phishing reports
Current License: CC BY-SA 3.0
8 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Jan 31, 2018 at 20:27 | comment | added | Tom | That might well be true and you should include it in your impact analysis. But still the level of management you deal with might not want to deal with individuals. | |
Jan 31, 2018 at 20:23 | comment | added | pm1391 | @Tom Without leaking who this contract is, the people within the organization have the potential to leak a lot more than their amazon password | |
Jan 31, 2018 at 10:09 | comment | added | Tom | @pm1391 at the level of top level management, individual performance is irrelevant. They have bigger fish to fry. They might be interested in the percentage of employees who don't get it after 10 campaigns, but not in individuals. | |
Jan 31, 2018 at 5:31 | comment | added | pm1391 | @industry7 accountable in the sense that after 10 campaigns, if user x does not improve, we need to sit down with user x. Because user x is not improving and does not care. | |
Jan 31, 2018 at 5:18 | comment | added | Stephan Branczyk | @pm1391, If you're interested in challenging your personal beliefs, read any book by W. Edward Deming. amazon.com/s/… He was big on not blaming the shortcomings of a company on the actual workforce but on its actual system designed by its management. | |
Jan 30, 2018 at 18:38 | comment | added | industry7 | "I have pride in keeping people accountable." - But how would you do that in this case? Do you expect the company to chastise their customers for falling for the phishing? Like should they send out a second email that says "If you fell for the last email you should feel bad."? | |
Jan 30, 2018 at 13:02 | comment | added | pm1391 | Understood. I just found it troubling that they didn't want to keep this reference for future phishing tests. And it does go against my "personal" ethics in a way. I have pride in keeping people accountable. But from the other answers it seems like it's more important to address it systematically | |
Jan 30, 2018 at 12:59 | history | answered | Tom | CC BY-SA 3.0 |