Isn't the big difference that they have to take it everytime they fail and open one they shouldn't? At least thats how it is at my place. They get a lecture, and then retake the course. Everyone else does it once a year along with all the other mandatory training we need to do for compliance.

[–] Sc00ter@lemmy.zip 1 points 1 week ago

Its also not about the individual. The company is doing an assessment of their security and vulnerabilities. If your company has any sort of restrictions on email attachments or methods of sharing files, theyre probably a result of people failing these tests