This month's video blog is one example of how a controlled "phishing test gone wrong" helped reduce real-world vulnerability to side-effects.