IT recently sent out three fake phishing emails to see how staff members would respond to a phishing attack. (You might remember, “phishing” is an attempt by bad guys to steal sensitive information.) Good news: we did really well when compared to other organization's click rate for these emails!

The results...

This test measured the click rate, i.e. how many people clicked on the link or attachment.  

This is excellent, but all it takes is one click to have an agency-wide impact. Phishing is the easiest and the most common form of attack!

FAQs to fight phishing…

Q. What are the correct actions? Can I open the email?

     A. Yes, opening an email won’t normally activate the malicious software.

Q. What if I click on the link or attachment?

    A. Report it to IT right away. Send an email to tech support. This will open a ticket. We’ll scan and clean your device.

Q. What if I see an email that is obviously spam or phishing and I don’t click on the link or attachment?

    A. You have 2 options:

1. Delete the email
2. Report it to tech support. We prefer this option so we can check the logs, but either is ok.

A special thanks staff who reported the phishing emails...