OH: "Security by Complacency", i.e. when people don't fall for scams because they are too lazy.

@oliof Oh, you wouldn't believe it.

But reading your work email ONLY after your colleagues remind you and request that you read their email message via slack or video chat is basically 100% protection against the regular phishing tests that our CISO entertains us with.

@oliof I've always been perturbed that "ignore every attempt at contact by others" isn't an acceptable strategy on mandatory cyber security training.
@katachora "by others" is maybe a bridge burnt too many, but I agree in principle.