attempts sending fake phishing messages to students and/or employees

["Miller, Don C." <donm () UIDAHO EDU>]

Has anyone attempted, or thought about, sending fake phishing messages
to your students and/or employees?  Did you use an outside vendor with a
strong followup educational component or was it an attempt to find the
most at-risk users?  Was it successful?  What political problems were
encountered and how were they addressed?  Since this is a consistent
issue we have been looking at some vendors who provide these services
and wanted to learn more about experiences from other institutions.

 

Thanks,

Don Miller

University of Idaho