1. If the email was NLHS impersonating itself, that's sick.
2. If the email was impersonating an outside trickster, it's the I.T. department's job to prevent its receipt.
Playing tricks on employees is an absolute outrage.
If it were myself, I would have simply sent out an authentic email to employees along the lines of "Can you identify the following (quoted and defanged) email as real or fake?"
I'd have to see the email. My opinion:
1. If the email was NLHS impersonating itself, that's sick.
2. If the email was impersonating an outside trickster, it's the I.T. department's job to prevent its receipt.
Playing tricks on employees is an absolute outrage.
If it were myself, I would have simply sent out an authentic email to employees along the lines of "Can you identify the following (quoted and defanged) email as real or fake?"
And then show them how.