Google Online Security Blog On Fire Drills and Phishing Tests1
However, there’s no need to make this adversarial, and we don’t gain anything by “catching” people “failing” at the task.
似乎在台灣的企業文化中，錯誤的行為通常會被直接扣分，卻缺乏事後檢討的過程。我們應該反省有哪些地方沒有做好，檢討哪些地方可以改進，也就是實行 Blameless Postmortems。