Lisa Brennan

PCI DSS v4.0 raised the bar for security awareness, naming phishing and social engineering explicitly. Here is what the standard now requires if you handle card data.

Attackers are phishing payroll portal logins and impersonating staff to reroute direct-deposit paychecks into accounts they control. The FBI has warned about it for years - here's how HR can stop it.

Click rate is the metric every program reports and the one that misleads most. Report rate, time-to-report, repeat-clicker reduction and the resilience ratio tell the real story. Here is how to measure and present it.