Phishing Tests coming soon…

Sensei Post in Identity Theft
0

Military, agencies to phish their workers. The military services and some agencies, including the Department of Homeland Security and the Department of Veterans Affairs, can now launch diagnostic phishing attacks against their own workers. The government-sanctioned attacks will be designed to test how well federal workers adhere to organization’s e-mail security policies. The agencies will launch the attacks with IMPACT software that will keep track of how many employees click on the malicious links. With that information, agencies can gauge the effectiveness of their IT security education program. Organizations also can use the penetration testing software for spear phishing, a highly specialized form of phishing attack that targets information relevant to the organization under attack. Other agencies with plans for using the Core Security software include the Labor, Energy and Agriculture departments, the National Institute of Standards and Technology, the U.S. Agency for International Development, the U.S. Courts and the U.S. Postal Service.
This is a great move by the goverment as putting people to the test is the only way to truely assess how well our agencies protect sensitive data. Equivalent to the retail practice of “shopping” your employees this will help determine the effectiveness of internal training and employee awareness.

« Prev: :Next »

Leave a Reply