Section 5.41 Preventing Phishing Attacks

Question 1

Preventing Phishing Attacks

Answer 1

The threat of a successful phishing campaign against your organisation can be mitigated effectively by

• Implementing the right strategies
• Providing user security awareness training

Question 2

Anti-phishing Campaign

U.S.A

Answer 2

Essential user security awareness training tool that can be used to educate individuals about the risks of phishing and how to best identify potential phishing attempts and techniques

Should offer remedial training for users who fell victim to simulated phishing emails

Question 3

5 indicators that give away a phishing attack

5 common indicators associated with phishing attacks

Answer 3

1. Urgency
2. Unusual requests
3. Mismatched URLs
4. Strange email addresses
5. Poor spelling or grammar

Question 4

Phishing mitigation - how to protect against phising attacks

Mitigation

Answer 4

■ Security Awarness Training

■ Report suspicious messages to I.T / Users

■ Analyse/Triage the event

■ Revise security after successful event