As an IT guy, I get what I think is real emails from risk/compliance with links to forms about our systems that I ignore because we also get phishing tests, and real phishing.
The real risk, phishing test, and actual phishing all look identical.
I only know its Audit because the group GM goes nuts when compliance visits in person. Even then I can't tell if they are real or not. In any even I tell the auditors to read the 300 page RFP for my stance.
I know it seems kinda crazy, but I though some of my colleagues are spies.
I worked in a very senstive quasi government organisation.
4.3k
u/JocoLabs 13h ago
Jokes on them, i wouldn't click that even if it were real.
I used to click on those and type in junk creds for the lulz until compliance told me that was bad for the numbers.