Human resources wants staff to get better at spotting and reporting fake 'payroll update' emails. Which awareness practice best addresses that goal?
Select an answer to reveal the explanation.
Short Explanation
Phishing drills are fire drills for the inbox—practice spotting the fake, then practice pulling the alarm the right way. Recognition plus reporting is the habit you want.
Full Explanation
Security awareness programs use phishing campaigns and simulations to build recognition skills and teach reporting procedures. The intent is constructive learning and measurable improvement, not merely punishment. Combined with clear reporting paths, campaigns reduce successful social-engineering impact on municipal staff.