Re: Phishing Simulation - Punitive Escalation

[Ken Connelly <ken.connelly () UNI EDU>]

I sold phishing education to our administration with the caveat that it
would *never* be punitive. I think that's an important piece of our program.

-ken

On 5/18/20 9:51 AM, Gomez, Joshua wrote:
> Hello
>
> I wanted to ask what people are doing for a "path to escalation" for
> staff who repeatedly fail simulations or cause incidents?
>
>  
>
> _For Example_
>
> First Failure -> Remedial Training
>
> Second Failure -> Remedial Training + Supervisor Notification
>
> Third Failure –> Remedial Training + Sit down with person and
> department head
>
> Etc.
>
>  
>
> I’m just trying to get some ideas to bring to our Governance
> committee.  We have not been trying to be punitive and haven’t needed
> to do much, but we are starting to see repeat offenders that need
> coaching for behavioral changes.
>
>  
>
> Thanks in Advance,
>
>  
>
> Josh
>
>  
>
> *Joshua Gomez*| *Analyst, Information Security*
>
> Information Technology Solutions
>
> _ _
>
>  
>
>  
>
>  
>
>  
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email
> reply. Additional participation and subscription information can be
> found at https://www.educause.edu/community

-- 
- Ken
=================================================================
Ken Connelly                       Director, Information Security
Information Security Officer          University of Northern Iowa
email: Ken.Connelly () uni edu   p: (319) 273-5850 f: (319) 273-3010

Any request to divulge your UNI password via e-mail is fraudulent!


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community