If you ask your staff to define terms such as “phishing,” “spoofed websites,” and “data breach,” how confident are you that they’ll all be able to do so correctly? And if you have an ethical hacker send a pseudo-malicious email across the entire company, how many employees would actually report it to your IT department?
You might be wondering what it means to score yourself low for either one of those questions.
