Watch this video on YouTube
You are an information system auditor of HDA Inc. You are conducting an audit to evaluate the effectiveness of a phishing simulation test conducted for staff members. Which of the following findings should raise the highest level of concern?