I’ve never fallen for phishing are you implying this avoidance skill is impossible to teach to executives? Obviously anyone who has custody of important information should not be in the born yesterday category of understanding what to do with that responsibility.