How to defend your organisation from email phishing attacks.

Introduction to Phishing

Phishing attacks: defending your organisation provides a multi-layered set of mitigations to improve your organisation’s resilience against phishing attacks, whilst minimising disruption to user productivity. The defences suggested in this guidance are also useful against other types of cyber attack, and will help your organisation become more resilient overall.

• This guidance is aimed at technology, operations or security staff responsible for designing and implementing defences for medium to large organisations. This includes staff responsible for phishing training.
• Staff within smaller organisations will also find this guidance useful, but should refer to the NCSC’s Small Business Guide beforehand.
• This guidance concludes with a real-world example that illustrates how a multi-layered approach prevented a phishing attack from damaging a major financial-sector organisation.

Note: The mitigations included in this guidance require a combination of technological, process, and people-based approaches. They must be considered as a whole for your defences to be really effective. For example, if you want to encourage people to report suspicious emails, then you need to back that up with a technical means of doing so, and a process behind it that will provide timely feedback on the email they submitted.

Read the full article from NCSC >

Email james.smallman@isldigital.com for more information

#isldigital #cybersecurity #phishing #ncsc