What do you consider to typically be the root cause of a phishing incident?
User error (lack of security awareness training)31%
Ineffective security controls67%
Something else (please explain in the comments)2%
114 PARTICIPANTS
What sets us apart?
No selling.
No recruiting.
No self promotion.
Take Your Insights On-the-Go
Root cause would be different for each incident.
But as of late, the root cause is often emails that are well crafted to fool most users.
Additionally, effective awareness training is often lacking such that people don’t know to be aware of these attacks.
Roger Grimes has a new book out ‘Fighting Phishing: Everything You Can Do to Fight Social Engineering and Phishing’ - https://amzn.to/3uBbEd2
It details the many things firms need to do in order to fight phishing.