http://it.toolbox.com/blogs/itmanagement/defining-your-overarching-goal-for-email-phishing-testing-72834