Your company culture will determine whether you are told about or forced to "find" data breaches caused by clicking a bad link.