|
Dear <FIRST NAME>,
The suspicious message you reported on <DATE> was a
simulated phishing email sent as part of our awareness programme. You spotted it and
you reported it — which is exactly the behaviour that protects the organisation.
|
Please keep doing it, including when you are not sure. We would far rather review
ten harmless messages than miss one real attack. There is no such thing as a wasted report.
|
Thank you,
<SECURITY TEAM>
|