@SwiftOnSecurity why do employees fail phishing tests if they just click a link, anyways? shouldn't it be a pass if you realize it's fake and back out without entering any info? unless they are really simulating browser exploits rather than phishing..?
@a @SwiftOnSecurity I agree with this point - its a fail if the user actually enters credentials and only then should they redo the training. Just clicking a link isn’t great but not enough to be a fail