Phish Recon

Audit existing security awareness program — coverage gaps, effectiveness metrics, and culture indicators. Use when asked to "audit our security awareness program", "find training coverage gaps", or "measure our security culture".