Phishing Training and Prevention
While it's not a new concept, phishing training and testing is becoming more cost-effective. This fact, combined with cyber insurance not only becoming more common, but also beginning to ask about things like this, has lead to more and more organizations adopting phishing simulations and trainings.
Is this an option for me?
A product that allows you to assign trainings, create and send phishing emails to your users to test them, and review the results is Phish Threat, from the Sophos suite of products that we offer.
Essentially, you would be able to assign all your users a short training that they'd need to complete, then you can send an email that is customized for your organization. It can look like an EZ Pass, Netflix, YouTube, etc. The system can than track who clicks on this and who does not, which can help you to determine what further training may be needed as well as how vulnerable your organization may be.
Of course, the end goal is to help users understand how to identify a spam email and report or ignore it, so that your organization, ideally, does not have to handle a situation where an email or other account is compromised as a result of a real phishing attack being successful.
