A drill is practice, not a test of character
A phishing exercise helps Northstar identify where clearer guidance and practice can support safer decisions.
This page uses fictional sample figures to show one way to summarize an exercise. They are not Northstar results and must be replaced only with approved results from a confirmed drill before publication as a real recap.
If you receive a real message that seems suspicious, follow Northstar's confirmed reporting process. If you clicked a link, opened an attachment, or shared information, report that promptly through the same confirmed route.
Illustrative drill results only
Fictional example figures for layout demonstration; not measured Northstar activity.
1,200
employees included in this fictional example
84%
completed the sample exercise
6%
selected a simulated link in the sample
11%
used the simulated report action in the sample
Useful takeaways for next time
These sample takeaways are general reminders, not a claim about what Northstar employees did.
Pause when a request feels out of context
A familiar name or a polished message does not by itself confirm that a request is genuine.
- Check the request against what you expected.
- Verify through a work channel you already trust.
Use the confirmed reporting route
A prompt report helps the organization respond; do not guess which reporting option to use.
- Follow Northstar's approved process for suspicious messages.
- If you already interacted with a message, include that fact when reporting.
Follow up in Training
If Northstar assigns follow-up learning after a drill, check the Training app for the course and its stated due date.
Review assigned learning in Training.
Use the confirmed reporting process for a real security concern; do not wait for follow-up training.