The Werks is an IT related commentary bringing you the unvarnished truth steeped in a vat of reality. The information contained herein is the opinion and rantings of a 30+ year veteran of the IT industry. This will hopefully give you helpful knowledge untainted by any specific vendor focused kool-aide. Occasionally, you may find that this collection of brain droppings will also give you the laugh you needed to make it through another day locked in the IT gulag. Read-on, brave soldier!
Monday, October 24, 2016
Data Security: A People Problem
Phishing Scams – A People Problem
There are some things that only people can fix. There are many security risks to which your data is susceptible, but there is one method that remains a wonderfully effective hacking tool. That is the phishing scam. This is a legitimate looking email that asks the reader to click on a link. If clicked, the link can infect the user’s computer with malicious software that can steal passwords, logins, and other critical data. Alternatively, the email appears to be from a legitimate source, perhaps even duplicating a legitimate webpage. The distinction is that the phishing email asks the user to enter personal information, including passcodes. In either case, that is how hackers easily get into your systems.
What's the best defense against this one? The single biggest defense is education. Training your people to be constantly wary of all the emails they receive. One way some firms are educating their people is by sending out their own "fake" phishing scams. Employees who click on the link inside are greeted with a notice that they've fallen for a phishing scam and then are offered tips how not to be fooled in the future. Think of it as the hi-tech version of Punk'd.
You may not be ready to go that far, but it is important to provide ongoing training to all of your staff about phishing scams. Your staff are all critical factors in your data security plans.