Phish reporting

Roll out processes and tools to manage potential phishing emails. 

Use this workflow:

• Report
• Analyze
• Remediate

Cybersecurity training educates employees about potential threats and how to identify them. Without a clear process in place to identify and report phishing employees may not know what to do. 

• Do they forward the email to their supervisor or IT support? 
• Do they delete the email? 
• If they do nothing, what happens to other employees who received the same email? 

Employees may do something that puts the organization at risk if they do not have a clear process to follow.

Put in place a clearly documented process for employees to report suspected phishing emails to the IT support team.

If you have a high volume of emails reported, consider creating a dedicated team responsible for cybersecurity. This could be a subset of the IT Support team.

Install tools to support the analysis, remediation, and eradication of actual phishing emails.