Just wondered how others promote threat awareness for friends, family, co-workers, and clients. Every few weeks I email a half dozen employees & family members explaining one or other phishing attempt I've seen, just to keep it in peoples minds. I heard someone else talking about a kind of email pen-testing service you can sign up for and they send scammy emails to see if the recipient falls for it. Seems like a great idea but only viable for me if it's very cheap. I could link to something on privacyguides.org in my email footer but I think that's just virtue signalling more than anything actually useful.