A mature program is indicated by employees recognizing phishing and actively reporting it—not just deleting it. ISACA guidance states that awareness programs should foster “threat identification and escalation actions,” not just passive compliance.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit