S&R Pros Must Empower Employees To Prevent Phishing Attacks

In a phishing attack, cybercriminals use email and/or social media to trick employees into revealing confidential information about themselves or their firms or clicking on malicious files or web links that infect their computers with malware. The attacker's phishing tackle box is loaded with specialized hooks to hack into an organization, and too many employees are taking the bait. When the countermeasures security teams employ fail to prevent these attacks, the next level of defense falls on the employee. Yet, current security awareness practices aren't providing the right kind of training to help employees identify and report phishing attacks. In this report, we look at where security awareness is going wrong and how security and risk (S&R) pros can revamp their security awareness programs to empower employees to protect themselves and their firms from phishing attacks.