Phishing Ourselves to Raise Awareness

Emory University and Healthcare changed phishing awareness approaches in 2010 from using traditional e-mail and web-based awareness messages to employing a third-party service to send phishing e-mails to everyone on campus. We've tracked the results of these efforts both over time and between a number of different demographic variables. We'll discuss notable trends and what level of value we feel we obtained from this approach. We'll also cover the technical and nontechnical challenges we encountered and how we addressed them.