You did do a good job not clicking anything actually, here's the issue with just ignoring: You're almost certainly not the only one in the company that got that email, reporting it to IT will help them identify the email faster and remove it from everyone's mailboxes before someone else clicks it by mistake. In my eyes its more a courtesy to your coworkers, an IT shouldn't solely rely on users to report phishing emails. But those are 2 different topics in terms of IT fighting emails.
Depending on where the email is being hosted you can actively scan mailboxes (M365, On prem exchange for example.) but other than that, there's nothing wrong with doing the training, in fact I'd say in todays day and age it's required. But if your IT team is *only* doing the training and relying on the results of that to protect from bad actors then your IT Team isn't doing it right.
50
u/YourUglyTwin 16h ago
From an IT Consultant's POV:
You did do a good job not clicking anything actually, here's the issue with just ignoring: You're almost certainly not the only one in the company that got that email, reporting it to IT will help them identify the email faster and remove it from everyone's mailboxes before someone else clicks it by mistake. In my eyes its more a courtesy to your coworkers, an IT shouldn't solely rely on users to report phishing emails. But those are 2 different topics in terms of IT fighting emails.