February 2021
Intermediate to advanced
85 pages
1h 29m
English
The following controls are suited to larger organisations as additional measures on top of those set out in the previous chapter. In many cases, they build on capabilities that should already exist or are developed in the earlier controls.
Phishing training is all well and good, but if you decide that the measure of success is that the organisation has staved off ransomware attacks, you’re running the very real risk that the training hasn’t been effective. It’s also worth remembering that a ransomware attack may only need one person to slip up.
A low-risk way of assessing the effectiveness of your training is to run phishing simulations. These fire off fake phishing ...
Read now
Unlock full access