We all know the threats.  We all know the risk.  So why do employees keep clicking on links made by the bad guys?  Why do they keep allowing fake support personnel to take over their computer?  Because the army of bad guys are smart, effective, and playing a numbers game.  And know it only takes one “phish” to take the bait.

Your company has spent a ridiculous amount of time, energy, and money solidifying technology, putting plans in place, and documenting procedures that ALL employees need to follow.  But this problem is not going away . . . especially when the front line of defense are good, honest people trying to do the right thing.  We just need to show them what the right thing is.  Over and over and over again.