ALL companies need to start testing their employees with in house phishing scams. I know a couple companies that do this as a service and C level guys fall for the scams every time... Makes one wonder about them. I think busy people are very vulnerable to attack.