Phishing testing should be testing your security systems, controls, and processes, not bypassing them to test and blame the users.#phishing #infosec