Svmuu News: Jimmy Su, Chief Security Officer at Binance, stated that Binance regularly conducts security habits tests for its employees. The internal red team launches simulated phishing attacks each month to assess whether security habits have improved; those who fail the test will undergo remedial training.
Jimmy Su noted that Binance has been conducting these simulated attacks for three to four years. While employees’ security habits were initially lacking, the company as a whole has now shown significant improvement. Test results are factored into employee performance evaluations, and those who repeatedly fail the simulated phishing attacks will see their ratings negatively impacted.
He noted that serious and repeated failures to pass the tests could result in an employee’s rating being lowered to the minimum level and could lead to termination. Simulation scenarios include the Red Team posing as recruiters or offering free conference invitations to collect personal information and test employees’ reactions.