Phishing 101: How Employees Are Targets

Monday, November 30, 2020 
2:30 pm – 4:30 pm Eastern

The 2019 Verizon Data Breach Investigations Report suggests 96% of breaches involve phishing emails. In 2018 the report suggested that 78% of employees can go a whole year without clicking on a phishing email, but that 4% of employees will click on everyone one. With hundreds of thousands of people working in financial institutions around the country, we have a high potential level of risk. Cybercriminals have also weaponized tools into phishing emails that can compromise our systems and takeover control. Phishing campaigns have been automated and are distributed as a service “crime-as-a-service” to other cybercriminals looking for repeatable processes to conduct mass scale phishing campaigns. Considering the high probability of people to fall victim and the damaging destruction phishing can cause, it positions phishing as a digital weapon of mass destruction.

This discussion will highlight the advancements in cybercrime and social engineering that are targeting our people resources. Best practices will be discussed for processes necessary to improve the weakest links in our institutions. With a reliable process, we can measure the level of risk and implement effective risk mitigating controls.

Topics Covered:

• Trends in Cyber Security Attacks
• Social Engineering – what you need to know
• Latest Phishing Scams
• Logical controls to reduce risk around people
• Creating positive cybersecurity culture
• Deploying continual and ongoing educational programs
• Unique ideas on educating people
• Automated phishing tests

Who Should Attend? 

Information Security Officer, IT Manager, Risk Officer, Internal Auditor, and Executives looking to understand the risk around Social Engineering and how to mitigate people risk.

Instructor

Jon Waldman

Jon Waldman is a co-founder and Senior Information Security Consultant for SBS CyberSecurity, a premier cybersecurity consulting and audit firm dedicated to making a positive impact on the banking and financial services industry. He maintains his CISA and CRISC certifications and received his Bachelor of Science in Computer Information Systems and his Master of Science in Information Assurance with an emphasis in Banking and Finance Security from Dakota State University. Over the last ten years Jon has helped hundreds of financial institutions across the country create and implement comprehensive, valuable, and manageable Information Security Programs. He also conducts webinars and certification programs for the SBS Institute.

Attendance verification for CE credits provided upon request.

Webinar Sponsored by Total Training Solutions

If you are having issues with registering online, please contact CBAO's Education, Training & Special Event Coordinator, Patti Webb, (614) 610-1877.