Sans recommends firms to test employees with fake phishing emails

Sans' recent report highlights two important security issues which challenge organizations: (1) vulnerabilities in web applications and (2) human vulnerabilities.