Find the weak spots
That would be anyone clicking on links in an email. Would it be legal to send emails to your own employees to identify these individuals and then "allow them to pursue new opportunities" before they have the chance to compromise your company?
Biting the hand that feeds IT
