Joshua Small on Nostr: Yeah, from my side, phishing tests are used so I can go to management and say "The ...

Yeah, from my side, phishing tests are used so I can go to management and say "The argument you don't need MFA because your employees are too smart to be phished is incorrect. In x% happily provided passwords on a test"". Individual user outcome doesn't matter.