Tag

Phishing Awareness Program

Guides organizations through building and running effective phishing awareness programs that reduce human risk. Covers program design, simulated phishing exercises, employee training content, metrics and reporting, and continuous improvement strategies that create lasting behavioral change across the workforce.

posts

Phishing Awareness Program

Phishing Awareness Program: Build One That Works

In March 2020, a single phishing email led to a credential theft incident at Magellan Health that exposed data on 365,000 patients. The attacker impersonated a Magellan executive, tricked one employee, and spent five days inside the network before anyone noticed. A functioning phishing awareness program might have stopped

Carl B. Johnson Apr 15, 2021 7 min read
Phishing Awareness Program

Phishing Awareness Program: Build One That Works

One Click Cost Them $100 Million In 2023, MGM Resorts was brought to its knees — not by a sophisticated zero-day exploit, but by a phone call. A threat actor called the help desk, impersonated an employee found on LinkedIn, and gained access to internal systems. The resulting ransomware attack cost

Carl B. Johnson Jan 19, 2020 7 min read