Yeah okay but our company IT dept sent out a security training link in an email titled "Win a free cruise!!!!" None of us clicked on it it's like you tell us not to open emails like this, but you send an email like this in order to train us not to open emails like this.
Says a lot about how highly your IT department thought of the employees if they communicated mandatory training that way. They expected a 100% of staff "gets fooled by obvious-sounding phishing spam".
I work in corporate IT and I can guarantee that no one in the IT department gives a rats arse if you do the training or not. It's management that care.