This morning I was written up at work. What a childish phrase and process.
I fired up my computer this morning and there was an email from DHL about my package. Click the link to verify your address.
It was clearly one of those corporate emails where they test us, and if we fail we have to take some training. So I follow our procedure to report the email, and then I emailed my team saying “hey, watch out! I got a phishing email and want to make sure nobody clicks in as this is a security threat”
I didn’t say it was an obvious corporate email to try to trick us. Just said it was a security threat.
And then I get a call with my manager and HR. They told me it was inappropriate to warn others, because it was just a test. I asked if the purpose of the test was for security, or to catch people making a mistake. They said it was for security. So I asked why I shouldn’t share the info with the team, and they told me because I knew it wasn’t real.
I was given a written warning.
I asked what security threats I should share with the team and which to keep to myself and they told me the tests should be private.
Which is weird.