We use a training/evaluation supplier to both help with exposing staff via simulated Phish and to evaluate submitted suspicious items. We include training to all staff and work to help staff who struggle with properly reporting Phish. The focus is on motivating staff, not punishing. //

We continue the efforts in earnest. Noteworthy is a 1 minute training animation video for Phish, part of a THINK series for Information Security:

Phishing emails are a real threat
So we need your help
Thousands of harmful emails attack us daily
Filters catch most of these Phish
But some still manage to get through the net
This is where YOU come in
Did you know?
If you delete a malicious email
It will be removed from your inbox
But the threat to (our organization) still exists
But if you report the malicious email
You help (our organization) defend against future threats
THINK, you colleagues depend on you
THINK, patients depend on you
THINK before you click. Office of Information Security <<