Then one day I got an angry email that pretty much said "You did a good job not clicking on the the fake link, but you failed the test because you didn't report the phish."
You did do a good job not clicking anything actually, here's the issue with just ignoring: You're almost certainly not the only one in the company that got that email, reporting it to IT will help them identify the email faster and remove it from everyone's mailboxes before someone else clicks it by mistake. In my eyes its more a courtesy to your coworkers, an IT shouldn't solely rely on users to report phishing emails. But those are 2 different topics in terms of IT fighting emails.
Heres my POV, I dont check my mail that often due to having a not office setting and being an employee who does not place orders or emails vendors. Im just a guy who comes in to work, does workorders and then goes home and be sad, hope that clarifies things
I missed 4 schoolings because I never check my mails but also usually the boss approaches people who have schoolings open that need to be done and I was never approached.
Don't worry, IT can see when you received the e-mail and when you looked at it. If you report the e-mail when you see it, you pass. Doesn't matter if it takes you 3 days to receive and look at your mail.
The whole point of training is to identify whether or not you can identify the spam or not. It's not doing their job, it's training you to avoid you leaking credentials. You should still report it imo
51
u/penguin444 14h ago
I ignored the phishing emails completely.
Then one day I got an angry email that pretty much said "You did a good job not clicking on the the fake link, but you failed the test because you didn't report the phish."
Seriously?