Questionable practices

So my company has resorted to sending several test phishing emails a day to test people. If you open just one of them you get written up, dinged on your performance review, and you have to take a 30-minute cybersecurity class.

Does this sound normal to anyone? I smell another round of layoffs coming. That's probably why my manager keeps asking me if I've been using AI - if you don't use AI it reflects negatively on your yearly performance review.