Skip to Main Content
Fighting Phishing
book

Fighting Phishing

by Roger A. Grimes
February 2024
Intermediate to advanced content levelIntermediate to advanced
448 pages
9h 22m
English
Wiley
Content preview from Fighting Phishing

CHAPTER 5Anti-Phishing Policies

Chapter 5 covers many of the policies you need to share with co-workers, family members, and friends, to fight social engineering and phishing.

The Importance of Anti-Phishing Policies

A big part of mitigating the threat of malicious social engineering and phishing is education. In an organization, that education begins with enacting, documenting, and communicating policies that fight social engineering and phishing. This chapter will cover many of those policies. All employees should review anti-phishing policies and sign an acknowledgment of having done so when hired and annually thereafter.

It is clear that all organizations need a specific anti-phishing policy. It can even be easily argued that not having specific anti-phishing policies leads to a greater risk of successful compromise. As discussed in Chapter 1, “Introduction to Social Engineering and Phishing,” social engineering and phishing are likely involved in 70% to 90% of successful hacking attacks. It is, therefore, a little strange that most organizations do not have specific policies against the number one most popular type of hacking.

Imagine if your house was being frequently robbed, and almost always by thieves coming through the windows. The thieves could break into the house using any number of other avenues (e.g., doors, garage, walls, floor, roof, chimney, attic, basement, etc.), but you have noticed that for over three decades they prefer to break in almost all the time ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

Cybersecurity – Attack and Defense Strategies - Second Edition

Cybersecurity – Attack and Defense Strategies - Second Edition

Yuri Diogenes, Dr. Erdal Ozkaya
Critical Infrastructure Security

Critical Infrastructure Security

Soledad Antelada Toledano

Publisher Resources

ISBN: 9781394249206Purchase Link