1. If the email was NLHS impersonating itself, that's sick.
2. If the email was impersonating an outside trickster, it's the I.T. department's job to prevent its receipt.
Playing tricks on employees is an absolute outrage.
If it were myself, I would have simply sent out an authentic email to employees along the lines of "Can you identify the following (quoted and defanged) email as real or fake?"
Imagine an employee sending an email to his/her boss with a lot of slurs and then claiming it did not count because it was just a "cybersecurity test".
fake quote> Hi! I'm John Smith. I filled an online pool that ask if you are a complete mega moron. You can see my vote in https://www.example.com .
I'd have to see the email. My opinion:
1. If the email was NLHS impersonating itself, that's sick.
2. If the email was impersonating an outside trickster, it's the I.T. department's job to prevent its receipt.
Playing tricks on employees is an absolute outrage.
If it were myself, I would have simply sent out an authentic email to employees along the lines of "Can you identify the following (quoted and defanged) email as real or fake?"
And then show them how.
Imagine an employee sending an email to his/her boss with a lot of slurs and then claiming it did not count because it was just a "cybersecurity test".
fake quote> Hi! I'm John Smith. I filled an online pool that ask if you are a complete mega moron. You can see my vote in https://www.example.com .