A municipal campaign calendar schedules GoPhish sends for an authorized awareness program. Which timing practice is most responsible?
Select an answer to reveal the explanation.
Short Explanation
Do not phish-drill the city while the EOC is lit up or during election quiet time. Responsible calendars respect emergencies and civic sensitivity windows. APT cosplay is not an excuse to punch the wrong day.
Full Explanation
A municipal campaign calendar for authorized GoPhish awareness sends should avoid launching during emergency activations and election quiet periods defined by city policy. Those windows carry heightened operational stress, political sensitivity, and opportunity cost; phishing drills can distract critical staff or create optics problems that outweigh training value. Responsible timing is part of civic ROE maturity, not an optional courtesy. Preferring election day mornings because staff attention metrics are highest exploits a sensitive civic moment and conflicts with quiet-period norms. Launching during active emergency operations to stress-test under maximum pressure risks interfering with real incident response and public-safety communications. Ignoring civic calendars on the theory that random 24/7 sends best simulate advanced persistent threats confuses adversary emulation goals with ethical municipal program design; APT realism does not require punching the wrong civic day. Exam caveat: GOAA scheduling items test policy-aware calendar discipline for city phishing programs. Operational check: maintain a shared blackout calendar for EOC activations and election quiet periods; require campaign owners to check it before GoPhish send approval.