A $53B company. 60,000 users. One Security associate with the age-old, trash, facetious solution to the persistent 20% phishing success rate and a challenge to make it viable.

Me:
“Just take away their internet access.”

CIO with a championship poker face:
“OK. Do it...and do NOT interrupt The Business.”

Join us for the tale of how a company executed on living out your sick, sadistic dreams of taking away internet access from your most dangerous users, and actually succeeding in tanking the click rate.

Description: This is by no means "yet another stupid phishing talk." In this brief session, we'll cover:

Our most effective phishing campaign designs
Technical aspects of how to actually put users "in jail."
The arduous exception process that makes managers responsible for their staff
How to maintain business continuity when your users can't surf the web
...and most importantly: did it actually reduce clicks long-term?