1. Would you click on a link in an email from your boss about holiday bonuses?

2. How about an email from the company president with a link to a Zoom meeting dealing with company reorganization and staffing reassignments?

3. Is it acceptable for companies to send fake phishing emails to their employees?

4. Cyber criminals take advantage of current events, emotional triggers and financial incentives. They capitalize on stressful experiences involving highly personal issues, but should your IT department?

5. Does the end justify the means?

6. Should failing phishing tests be a "fireable" offense?

7. Can an employee phishing test be done without creating an anxious and possibly alienated workforce? How?