登录查看更多内容

How can you make your organization more resilient to phishing?

由人工智能和领英社区提供技术支持

Phishing is one of the most common and effective cyberattacks that can compromise your organization's security, reputation, and productivity. Phishing emails are designed to trick you into clicking on malicious links, opening infected attachments, or revealing sensitive information. How can you make your organization more resilient to phishing? Here are some tips to help you protect yourself and your colleagues from falling victim to this threat.

此文章中的业界达人

由社区从 2 条内容中精选。了解更多

Tim Scyner

Furthering security through engagement, thought leadership and collaborative thinking

1 Understand how phishing works

Phishing emails often impersonate legitimate entities, such as banks, bosses, or trusted partners. They employ various tactics to create a sense of urgency, curiosity, or fear and persuade you to take an action that benefits the attacker. For example, they may ask you to verify your account details, update your password, or confirm a payment. However, if you look closely there are signs that can indicate a phishing attempt - such as spelling and grammar errors, mismatched sender name and email address, suspicious or generic subject lines, unusual or unexpected requests, altered or fake logos and signatures, and links or attachments that do not match the context or domain.

添加您的观点

Tim Scyner

Furthering security through engagement, thought leadership and collaborative thinking
举报内容
One of the key principles here is understanding how your organization or industry specifically may be targeted. As phishing emails get more and more sophisticated they also become more tailored to the target, so understanding what a phishing email being targeted at your organization looks like can become your strongest weapon in employee education and awareness. Utilizing examples of emails that have been received within your organization allows your employees to understand what to be on the lookout for. This can be combined with the standard information of hovering over any suspicious URLs or email addresses and validating through an alternate method with the sender if they are known to the recipient.

已翻译

赞

2 Educate and train your staff

One of the best ways to prevent phishing is to raise awareness and educate your staff about the risks and consequences of this attack. You can provide regular training sessions, workshops, or webinars that cover the basics of phishing, how to spot and report it, and what to do in case of a breach. You can also use simulated phishing campaigns to test your staff's knowledge and behavior, and provide feedback and guidance on how to improve. By creating a culture of security awareness, you can empower your staff to be more vigilant and responsible.

添加您的观点

Imalee Munasinghe

Senior Manager at EY Cybersecurity
举报内容
Simulated phishing campaigns are a great start but employees are often too used to these and don’t fully comprehend how threat actors can use a successful phishing attack to launch a larger more damaging attack on an organisation. I feel average employees would find it enlightening if phishing simulations are extended to broader threat/attack simulations and crisis management drills

已翻译

赞

3 Use security tools and policies

In order to make your organization more resilient to phishing, security tools and policies can be used to detect and block malicious emails, links, and attachments. For instance, antivirus and anti-malware software should be installed and updated on all devices, spam filters and email authentication protocols should be enabled, multi-factor authentication (MFA) should be implemented, data should be encrypted and backed up, and security policies and best practices should be enforced. This includes using strong passwords, avoiding public or unsecured Wi-Fi networks, and limiting access to sensitive information.

添加您的观点

4 Respond and recover quickly

Even with the best precautions, you may still encounter a phishing attack that manages to bypass your defenses. Therefore, it is important to respond and recover quickly in order to minimize the damage and restore your operations. You should report the incident to your IT department or security team immediately, disconnect your device from the network and scan it for malware, change your passwords and revoke any permissions or tokens that may have been compromised, notify your contacts and customers about the breach and warn them not to open any suspicious emails from you, and review and update your security measures and procedures to prevent future attacks. Phishing is a serious and persistent threat that can affect any organization, regardless of its size or industry. By following these tips, you can make your organization more resilient to phishing and protect your valuable assets and reputation.

添加您的观点

5 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Security Awareness

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you make your organization more resilient to phishing?

1

2

3

4

5

1 Understand how phishing works

2 Educate and train your staff

3 Use security tools and policies

4 Respond and recover quickly

5 Here’s what else to consider

Security Awareness

给文章评分

感谢您的反馈

更多Security Awareness相关文章

更多相关阅读内容