Consider third-party vendor employees who have accounts at your workplace. They don’t know what the norms are, or the safe URLs. Half your employees in non-coding roles don’t know what the safe URLs are either. There’s so much internal SSO mess that just about anything could be a real redirect. Overengineered internal messy networks keep any of this from actually accomplishing its intended purpose of “teaching employees a lesson”.
I’m not sure what’s worse: that you’re teaching them to click on whatever they want because it’s impossible to tell the difference, or that you’re teaching them to click on nothing, which probably keeps them from doing their jobs.
Stop using email entirely and half of this goes away. Just tell them not to plug in USB drives.
No it isn’t.
Consider third-party vendor employees who have accounts at your workplace. They don’t know what the norms are, or the safe URLs. Half your employees in non-coding roles don’t know what the safe URLs are either. There’s so much internal SSO mess that just about anything could be a real redirect. Overengineered internal messy networks keep any of this from actually accomplishing its intended purpose of “teaching employees a lesson”.
I’m not sure what’s worse: that you’re teaching them to click on whatever they want because it’s impossible to tell the difference, or that you’re teaching them to click on nothing, which probably keeps them from doing their jobs.
Stop using email entirely and half of this goes away. Just tell them not to plug in USB drives.