Dear People Who Prepare Others for Uncertainty,
Earlier this year, Microsoft wrote about an attack that began with someone posing as IT support on Teams. Two employees questioned it. A third granted access. It’s tempting to look at an incident like that and think: we need to teach employees about this kind of scam.
But cybercriminals spend their working lives finding new ways to deceive people. Ordinary employees cannot reasonably be expected to keep up with every new technique.
So perhaps the better approach is: Teach the pattern, not every scam
Employees do not need to know exactly what kind of attack they are looking at. Instead, they need to recognise when something may be unsafe and know the safer next step: stop, check and ask.
This October is Cybersecurity Awareness Month, and on LinkedIn, we’re exploring that idea through: “Ag, it looked legit”, because increasingly, it probably will.
Warm regards,
The Compliance Online team