Many security teams try to put in their best efforts in security awareness training to combat phishing attacks. However, the teams need to understand that education and knowledge cannot nurture without resources and systematic actions. They should encourage a culture where it is safe to report phishing. Additionally, it is crucial to implement changes to ensure the reduction of the phishing impact. In her article for Dark Reading, Kat Sweet talks about ways to reduce the risk of phishing.
Standardizing Secure Reporting
In general, security teams and leaders should instill a culture of reporting a phishing attack and normalizing the act. Sweet believes that an act of security reporting is integral to psychological safety. If you want an employee to report phishing, it is essential to lay down the base for a transparent and trustworthy environment. Another thing to keep in mind is acknowledging the phishing and showing gratitude to the employee that reported it.
Resolving the Issue
There are several ways to ensure safety from phishing attacks. Sweet asserts that the fundamental goal of keeping an error contained should work in such a way that it does not affect efficiency due to security decision exhaustion. If the threat under question is a malicious file, application allow-listing can prevent unknown binaries from running. There are times when credential phishing becomes a concern. Single sign-on, usable multifactor authentication, and standard password managers serve as a robust set of factors to smoothen the password complexity guidelines.
Buying all the employees their systems is not always a realistic strategy. Although it significantly reduces the risk, the best way to deal with a phishing attack is to remove complicated security aspects from an individual’s horizon.
Click on the link to read the article:
https://www.darkreading.com/edge-ask-the-experts/how-do-i-make-getting-phished-less-of-a-crisis-
