As the saying goes the best things in life are free. Security professionals spend significant amounts of time on anti-phish training and many have paid anti-phishing simulation campaigns to maintain that ongoing training effort.
However every organization has one very important weapon in their fight against phishing fraud. One very important and very cost effective, as in free, weapon!
I discovered this weapon when other staff members in the organization forwarded phish emails into the information security office.
