A company is planning to run a security awareness campaign that focuses on identifying email threats. Which option would be the BEST to include in the campaign to effectively educate employees on recognizing and reporting potential phishing attempts?
Hosting a quarterly security seminar that covers a range of security awareness topics, including phishing.
Sending out a company-wide email with a list of tips for identifying phishing emails.
Distributing a monthly newsletter that covers various topics, including a brief section on email security.
Conducting tailored phishing exercises with immediate feedback for employees who fall for the simulated attack.