Monthly drop-in labs where employees practice phishing response, vishing detection, and fraud escalation.