Defense and intelligence officials have declined to say what they do to employees who open bad emails described as “phishing” attempts.

“What steps are being taken to deal with phishing in terms of either requiring greater accountability by those who hold those positions who end up clicking, by either punishing them or coming up with some system so that we can anticipate that kind of phishing going on and prevent it?” Rep. Jackie Speier, D-Calif., asked officials at a House Armed Services Committee hearing Wednesday.