Makes reporting one click and staffs triage for surges

Gives everyone a one-click report button and a triage process that can absorb a sudden flood of reports.

Large campaigns swamped help desks in a real incident study, and crowdsourced reports only help if someone acts on them.

How to observe it: Report-to-triage time during peak campaigns; share of reports closed with feedback.

Supporting evidence

• Phishing in Organizations: Findings from a Large-Scale and Long-Term Study Lain et al., 2022
• A Case Study of Phishing Incident Response in an Educational Organization Althobaiti et al., 2021