Security in the enterprise is a nebulous concept. Don’t click on suspicious emails, we say. As security professionals, we can’t emphasis this enough. Still, how many times do you get a call or an email from a user stating they not only clicked the link, but they entered their credentials, address, phone number, answers to their security questions, bank account details, mailed them their first born, and installed a new program to speed up their computer. It’s all too common.In my talk I will discuss how you can get your staff to become your blue team - by red teaming them.