Security News > 2020 > March > Time to limber up in the battle against cybercriminals

VAPs therefore must be prioritised for training, with additional attention given to checking their accounts for potential compromise, but they are not the only ones you should train.

The problem training must address is employees do not consider themselves responsible for detecting and avoiding phishing.

The best way to get people to understand the threats is to show them what the threats look like, and to train them using phishing simulation campaigns that are tailored to their user profile.

"If I'm a major target for credential phishing, and I take a course on credential phishing and I don't pass the test, then I'm going to keep receiving the training," Cosgrove says.

The foundations of that culture are people and turning them into assets in the war against cyber criminals rather than - at best - neutral observers and - at worst - victims takes robust and practical training.

News URL

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/03/05/security_against_cybercriminals/