How to Respond Phishing Attacks

Understanding the Problem

It’s natural for all organisations to experience phishing attacks and indeed, it is a matter of time. On average, it takes organisation about 197 days to identify and 69 days to contain a breach. Organisations contain a breach in less than 30 days save more than $1 million in comparison to those contain a breach longer[1]. These are critical incidents that organisations have to respond to rapidly, before significant damage occurs.

Questions Regarding the Problem

● How quickly could you respond to a phishing attack that had reached multiple users’ inboxes?

● How would you scan all users’ inboxes to check if other users had been attacked by the same phishing scam (or it’s different variants)?

● How would you contain a phishing attack designed to infect your organisation with malware or ransomware?

● What sort of actions will you take to prevent these attacks in the future?