[rdtsc]

> Any organization should be able to quantitatively prove their value on some level.

There is danger there with corrupt and immoral organizations. They might just start generating false incidents and then run to save the day to pad their stats "look how effective we are!".

Luckily, that only happens with deeply corrupt organizations. Like for instance FBI [1], when they were sending their informants to mosques in US looking to recruit terrorists. Up until the the members of the mosque ended up reporting the FBI agents to the FBI.

--- Niazi and another mosque member had reported Monteilh to the FBI, claiming that Monteilh was espousing terrorist rhetoric and trying to draw them into a plot to blow up shopping malls ---

[1] https://www.ocweekly.com/news-the-fbi-the-islamic-center-of-...

[heavenlyblue]

> Like for instance FBI [1], when they were sending their informants to mosques in US looking to recruit terrorists. Up until the the members of the mosque ended up reporting the FBI agents to the FBI.

I am not saying what FBI does is good, but this reminds me now that the only way to deal with constant threat of phishing is actually to create false fishing attacks all the time, so that people would be aware of the thread. Could be generally a good approach if the methods employed were more public rather than clandestine.