Phishing Training for Small Business Teams with Craig Taylor
from The Web Talk Show Hosted by Armando J. Perez-Carreno
Phishing training for employees often uses fake emails and punishment for anyone who clicks. Craig Taylor, co-founder of CyberHoot, explains why positive reinforcement works better at helping your team spot real phishing attacks. In this episode: Craig says punishment only holds a behavior down for a while, and rewarded behaviors are the ones people repeat. When a failed phishing test leads to meetings with a boss and then HR, many employees stop trying and start to resent the IT department. Phishing emails often show four signs: urgency, emotion, authority, and secrecy. A click matters because of where your computer sits on the company network and the shared files and accounts it can reach. A password manager won't fill in your login on a fake site, and that's what kept Craig from handing over his LinkedIn password. Guest: Craig Taylor, co-founder, CyberHoot CyberHoot: https://cyberhoot.com CyberHoot blog: https://cyberhoot.com/blog/ CyberHoot for individuals (free): https://cyberhoot.com/individuals Chapters 00:00 Craig's path from psychology to security 03:29 Why punishing clicks doesn't work 10:08 What a failed phishing test does to staff 11:17 Warning signs of a phishing email 14:27 Why one click can hurt your company 21:25 When a real email looks like phishing 28:41 Password reuse and password managers 37:43 Password managers for your team 43:15 First steps to protect your business Episode page: https://webtalk.show/episodes/092-what-you-dont-know-about-your-email/ Hosted by Armando J. Perez-Carreno. Learn more at https://perezcarreno.com
Embed this episode
No transcript yet.