SecurityGeneralTable-stakes
Phishing
Also written as Social Engineering, Spear Phishing, Business Email Compromise
Tricking a person into handing over credentials or money by impersonating someone they trust. Spear phishing targets one named individual instead of a mass mailing.
Think of it like
A caller who already knows your account number and your manager's name, so the request sounds routine.
Junior or senior?
Table-stakes awareness for anyone in security, so the claim alone says little.
Senior sounds like
Has run simulations and can separate what changed behaviour from what merely annoyed staff.
Ask them
“What actually reduced click rates at your organisation, beyond the annual training module?”