We all know that the end user is the weakest link. With all the talk around how broken user education is, I'd like to offer my two cents on it. I'll be going over the user education by phishing and rewards program I put into place in an enterprise environment. The metrics I tracked were 1. users targeted
2. users sucessfully phished
3. phishes reported

I'll share what I did, learned, screwed up on, and would change. I'll also have all of my material for the program available for anyone to use.
A detailed outline of your talk
I. Intro
II. Metrics
III. Awards Program
IV. 9 months of spreadsheets
V. What I've Learned
VI. What I Would Change

Back to GrrCON 2015 video list