No. I work for a rather big company, people internally report security concerns like phishing e-mails, suspicious files, GDPR breaches, whatever. Shit also comes in from automatic detectors (antivirus detecting malicious files, multiple failed logins, whatever). Have to triage these reports and act on them (like blocking the links in the phishing e-mail, deleting the e-mail for everyone that received it, contacting the person to see if everything is ok with their account if they can't login, etc).
2021-01-21 00:37