An organization recently implemented a cybersecurity awareness program that includes anti-phishing exercises for all employees. What type of control is being ut...