A city red-team charter sets goals for an authorized social-engineering exercise. Which objective best aligns with ethical municipal awareness practice?
Select an answer to reveal the explanation.
Short Explanation
The point is better reporting and harder targets—not dunking on coworkers on the intranet. Measure the behavior you want, coach the rest, and leave the humiliation theater at home.
Full Explanation
An authorized municipal social-engineering exercise should measure staff reporting rates and improve defenses without humiliating employees. Ethical civic awareness practice treats workforce members as partners in resilience: collect metrics on reporting speed, lure recognition, and process gaps; coach and harden; avoid public shaming that damages culture and may create hostile-workplace issues. City charters that center learning over humiliation produce better long-term reporting behavior.
Publicly shaming employees who fail the exercise on the city intranet homepage is punitive theater and undermines psychological safety needed for real phishing reporting. Collecting personal gossip during pretext calls for later HR leverage abuses authorized testing for coercion and is ethically and often legally improper. Maximizing fear by threatening job loss in every authorized lure may spike short-term clicks but trains terror rather than durable secure behavior and can violate HR/policy norms.
Exam caveat: SE objectives on civic exams emphasize measurement, awareness, and defense improvement—not humiliation, gossip harvesting, or fear maximization.
Operational check: define success metrics (report rate, time-to-report, help-desk verification use) in the charter; ban public individual shaming; route failures to private coaching; brief leadership on aggregate trends only.