{"id":3326,"date":"2021-04-13T16:12:03","date_gmt":"2021-04-13T20:12:03","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3326"},"modified":"2021-04-13T16:12:03","modified_gmt":"2021-04-13T20:12:03","slug":"why-you-need-a-clear-phishing-prevention-plan-for-your-business","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/","title":{"rendered":"Why You Need a Clear Phishing Prevention Plan for Your Business"},"content":{"rendered":"

\"Why<\/p>\n

Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time? Can it actually help mitigate an attack?<\/span><\/p>\n

When we discuss cybersecurity, perhaps because of its already storied history, we tend to think of viruses battering on the gates until something breaks through. Granted, some attacks do still resemble that. However, it takes a sophisticated malware program modified over several iterations. Moreover, those kinds of attacks tend to attract attention from even legacy cybersecurity solutions.\u00a0<\/span><\/p>\n

So hackers often instead try another tack: they just ask users to let the attack go through.\u00a0<\/span><\/p>\n

After all, what is a phishing attack if not hackers politely (or not so politely) demanding users\u2019 credentials or other means of entry? External threat actors know that with the right combination of impersonation (especially with spear-phishing attacks), stated urgency, and camouflage in the deluge of other communications, a phishing attack has a much higher chance of succeeding than most other cyber-threats.\u00a0<\/span><\/p>\n

Therefore, your enterprise needs to have a phishing prevention plan<\/a> in place. But what does that entail?\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

Critical Components of a Phishing Prevention Plan\u00a0<\/b><\/h2>\n

Education, Education, Education<\/b><\/h3>\n

First, as with so many other categories of cyber-threats and cybersecurity, education proves key to fortifying your business. Remember, your biggest attack vector comprises your employees and their behaviors; even the most sophisticated cybersecurity solution can\u2019t perform optimally if your employees constantly put your business at risk.\u00a0<\/span><\/p>\n

So you need to ensure your employees receive regular and compelling cybersecurity training and education. They should understand what to look for in a phishing attack and a spear-phishing attack, potential warnings signs. Further, you should make sure they understand your policies for clicking unrecognized links and for alerting your IT security team if they suspect a phishing attack.\u00a0<\/span><\/p>\n

Email security can catch a majority of threats before they end up in your employee\u2019s email. Education can help cut down the number of phishing attacks even more.\u00a0<\/span><\/p>\n

Establish Clear Internal Communication Styles<\/b><\/h3>\n

Spear-phishing attacks represent the cumulative efforts of weeks of research and effort; they are targeted, manipulative, and difficult to detect. With information culled from social media and public announcements, hackers can figure out how to impersonate an employee or senior member of any enterprise. From there, they can ask employees (using fake email accounts) to do anything they might need to complete their attack.<\/span><\/p>\n

Thus, your enterprise must establish a clear set of communication rules for employees and managers to ask other team members to make purchases, input logins, and the like. You can incorporate those communication rules into your workflows, clarifying how employees should recognize legitimate requests from more suspicious ones.\u00a0<\/span><\/p>\n

However, employees should also know who to contact (and how to contact securely) if they suspect that a seemingly legitimate request isn\u2019t authentic.\u00a0<\/span><\/p>\n

Have a Clear Incident Response Plan (and Practice It)<\/b><\/h3>\n

Of course, all of the above components of a phishing prevention plan require a clear chain of incident response actors. If you don\u2019t have one established, <\/span>your enterprise should prioritize making one immediately<\/span><\/i>.\u00a0<\/span><\/p>\n

This incident response plan should delineate who is responsible for what during a suspected and confirmed data breach; it should set up a threat hunting and threat mitigation team to handle and close the breach as quickly as possible. Additionally, it should outline communications to employees and relevant departments including Public Relations and Legal.\u00a0<\/span><\/p>\n

Of course, having a plan sitting on a shelf collecting dust helps no one. Instead, you need to practice your incident response throughout the enterprise on a regular basis, as you would practice a fire drill in the analog world. Only by practicing can you detect potential communication gaps and find vulnerabilities.\u00a0<\/span><\/p>\n

<\/div><\/p>\n

For more on forming a phishing prevention plan, check out the SIEM Buyer\u2019s Guide<\/a>.\u00a0\u00a0\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time? Can it actually help mitigate an attack? When we discuss cybersecurity, perhaps because of its already storied history, we tend to think of viruses battering on the gates until something breaks through. […]<\/p>\n","protected":false},"author":41,"featured_media":1392,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,95,112,1147,86,212,1183,1559,1558,21,57,22],"acf":[],"yoast_head":"\nWhy You Need a Clear Phishing Prevention Plan for Your Business<\/title>\n<meta name=\"description\" content=\"Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why You Need a Clear Phishing Prevention Plan for Your Business\" \/>\n<meta property=\"og:description\" content=\"Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-13T20:12:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/\",\"name\":\"Why You Need a Clear Phishing Prevention Plan for Your Business\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg\",\"datePublished\":\"2021-04-13T20:12:03+00:00\",\"dateModified\":\"2021-04-13T20:12:03+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Mimecast State of Email Security 2021 Shows Surge During Pandemic\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why You Need a Clear Phishing Prevention Plan for Your Business\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Why You Need a Clear Phishing Prevention Plan for Your Business","description":"Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/","og_locale":"en_US","og_type":"article","og_title":"Why You Need a Clear Phishing Prevention Plan for Your Business","og_description":"Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time?","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2021-04-13T20:12:03+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/","name":"Why You Need a Clear Phishing Prevention Plan for Your Business","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg","datePublished":"2021-04-13T20:12:03+00:00","dateModified":"2021-04-13T20:12:03+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Why does your business need a clear phishing prevention plan? What steps of incident response can you take care of ahead of time?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/ransomware-3-mod.jpg","width":800,"height":400,"caption":"Mimecast State of Email Security 2021 Shows Surge During Pandemic"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/why-you-need-a-clear-phishing-prevention-plan-for-your-business\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Why You Need a Clear Phishing Prevention Plan for Your Business"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3326"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3326"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3326\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1392"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}