• Information Systems & Technology
• Policy

Phishing tests don’t need to be evil

Apr. 13, 2021

• 

Authors:

• Jason Thatcher

Department/Center:

• Management Information Systems

From the Harvard Business Review: Although phishing tests can be helpful to protect users, using questionable tactics has the potential for harming relationships between a company and its employees. The authors suggest that managers avoid this damage by employing phishing tests with three criteria: Test teams, not individuals; don’t embarrass anyone; and gamify and reward.