NHRMC's IS Security Team has released the March edition of its OUCH! newsletter, with a focus on Phishing Awareness.
Every system employee should be able to recognize a phishing email, where a user attempts you to click a link that can damage your computer or network, or is designed to steal important information.
If you receive a phishing email, you should report it immediately, using the "Report Phishing" button on your device.
The IS Security Team will soon be sending a test phishing email, so NHRMC users can become familiar with the "Report Phishing" button.
Here's an excerpt from the OUCH! newsletter:
In the coming months, we’ll be running a comprehensive phishing awareness program. By taking a proactive stance and learning how to spot and report potentially dangerous emails, we can keep our organization safer. In this program, you will periodically receive simulated phishing emails that imitate real attacks. These emails are designed to give you a realistic experience in a safe and controlled environment. This method allows you to become familiar and more resilient to real world tactics.
If you see any suspicious emails report it with the Report Phishing Button. If you do fall for one of the simulations, we ask that you take 30 - 60 seconds to read and understand the brief education material that is presented afterward. As the program continues to progress, you will be able to better spot phishing attacks, both at work and at home.