This same thing happened at my company recently. We get tons of phishing and scam emails, and then one day another one shows up out of the blue with a very suspicious subject line, so I ignore it. IT guy had to jump on a meeting with the whole office the next morning to explain that yes it is a legit email so please stop reporting it and also please complete the training by clicking the link inside the email.
Like, I feel like if you send your “training” email to people in the form of a well-known phishing scam email, there’s no need to ensure that they follow up with the training, because either they are tricked by the subject line and then directed to complete the email safety awareness training (presumably you would know who clicked on it to make sure they actually do complete it), or they’re intelligent enough to not click on it in the first place and thus already computer-literate enough to not get scammed by obvious bullshittery.
This same thing happened at my company recently. We get tons of phishing and scam emails, and then one day another one shows up out of the blue with a very suspicious subject line, so I ignore it. IT guy had to jump on a meeting with the whole office the next morning to explain that yes it is a legit email so please stop reporting it and also please complete the training by clicking the link inside the email.
Like, I feel like if you send your “training” email to people in the form of a well-known phishing scam email, there’s no need to ensure that they follow up with the training, because either they are tricked by the subject line and then directed to complete the email safety awareness training (presumably you would know who clicked on it to make sure they actually do complete it), or they’re intelligent enough to not click on it in the first place and thus already computer-literate enough to not get scammed by obvious bullshittery.
Sounds like a genius move if he didn’t then fuck it up by the meeting thing.