Catherine has been working as an IT Security Analyst in the IT Security Team at a large transport and logistics company in Australia, which has a national presence with over 15+ branches across the country. Part of Catherines role is to make sure that the companys IT infrastructure is secure, and that all employees are aware and engaged in the topic of cybersecurity.

One morning, Catherines team sent out a mock phishing email to all employees across the country. The employees who received this email would not know that it was sent by Catherines team (i.e. the IT Security Team). The aim of sending the mock phishing email was to see how many of the recipients would click the contents, so that Catherines team can identify any security vulnerability in the organisation.

10a) In this situation, which of the following stages of crisis management is this organisation most likely to be in: preparation, identification, containment, eradication, recovery or lessons learnt? Explain why.

10b) Identify and describe one challenge related to organisational communications and stakeholder management in this situation , and explain why .