Phishing Awareness Exercises
The vulnerability of users to social engineering is well known, however very few techniques have been developed to successfully mitigate the threats users unwittingly expose our infrastructure to. Annual training and awareness campaigns have done little keep users vigilant against the many forms social engineering, especially phishing emails. Phishing is regarded as one of the most effective social engineering attacks. In this paper we describe an effort to increase the awareness of users through a campaign of training, policies, and assessment.
|
© 2026 The Colloquium for Information Systems Security Education (CISSE). All rights reserved. This copyright notice applies only to website content on cisse.info and does not apply to the journal hosted at journal.cisse.info. All journal articles published in The Journal of The Colloquium for Information Systems Security Education (JCISSE) are © their respective authors and are distributed under the Creative Commons Attribution 4.0 International (CC BY 4.0) license. |