If you have to educate people to not use the tools you have given them in a certain way to remain secure you have failed. Relying on security awareness training is an admission of failure.
This meme must be eradicated from the gene pool.
So writes Rich Stiennon in “Dangerous meme.” He’s absolutely right. Training people to resist con men who say precisely the same thing as a business isn’t going to work.