- Establish a targeted security-awareness program that is interesting and interactive
- Create awareness posters, and make them visible within the company to help employees understand how the company is addressing Social Engineering
- Educate employees to be sceptical and on what to be on the lookout for in regard to common phishing and spear phishing schemes
- Leverage the help of technology, and use advanced spam filtering such as Microsoft 365 Advanced Threat Protection
- Ensure employees do the following:
- Monitor their online accounts regularly
- Ensure they do their sensitive transaction online only on websites that use secure protocol such as HTTPS
- Ensure they are aware of phone phishing, and train them not to share personal information ...