Sequim IT director urges commissioners to use short phishing-awareness training; engagement near 50%

Sequim’s IT director presented a brief phishing-awareness program to the Planning Commission on June 2 and urged commissioners and staff who use city equipment to participate. "Typically the people who are participating are less likely to click on that phishing that usually compromises your email and the login the password," Ole Stan said, describing short 20–30 second training videos and occasional simulated phishing tests.

Ole Stan said his analytics show roughly 50% engagement among the commissioner/staff group and asked members to report suspected phishing using Outlook’s "Report Phish" button. He explained the program’s two-part approach: brief recurring videos to build awareness and simulated phishing messages to allow staff to practice reporting suspicious messages. "The idea is that the more participating in the program the more knowledgeable you become," he said.

Commissioners raised practical concerns: one said they do not open emails from unknown senders and questioned testing methods; another said public emails should be routed through the planning department rather than delivered to individual commissioners. Ole Stan acknowledged the varied practices and encouraged commissioners to call IT with questions. He also reminded commissioners that messages to elected/appointed officials are public records, noting the need for caution with requests for personal or financial information.

The IT director asked commissioners to watch the short videos and to report suspicious tests; staff agreed to follow up on specific policy questions about how public emails are routed and handled.