Who decides whether an email is tagged as spam, quarantined, or delete, is usually either the organization’s system administrator (usually someone in the IT department), or a Managed Service Provider if a small business is subscribing to a gateway spam filter via a service reseller. The rules can be flexible inasmuch as some spam emails can be tagged as spam and forwarded to a user’s inbox with a warning, while it can make more sense to quarantine suspicious attachments or delete emails send to users with a known susceptibility to phishing emails.