Cyber Security Awareness Program: Topic 1 - Phishing Emails

Published on 12 April 2022

I refer to my email on Tuesday (1 March – copy attached) introducing our Cyber Security Awareness Program (CSAP).

Our first topic in the CSAP is Phishing Emails, and I draw your attention to this introductory video (less than 2 minutes in duration): https://www.microsoft.com/en-us/videoplayer/embed/RE4EIXC?pid=ocpVideo0-innerdiv-oneplayer&postJsllMsg=true&maskLevel=20&market=en-us

Key Messages:

The Cyber-Security Incident that hit the organisation in December 2019 resulted from a Phishing email. So this is not a theoretical risk, we have lived through the impacts of these attacks on our Business Continuity.

Treat unsolicited requests to enter your username and/or password with extreme care; assume the request is harmful until you confirm otherwise. By means of analogy: You wouldn't open your front door just because someone on the other side asks to come in – you are likely to confirm their identity and what they want before doing so.
Never, like never, click on a link to an internet page that you did not request.

Some Q&A's:

Why can't Council's security systems stop all harmful emails?	Our security systems block the vast majority of Phishing emails, and we are constantly upgrading these systems to try and stay ahead of the game. However, even with all this effort, a small number of emails will get through from time to time. As such, we all need to play our part in keeping the organisation's computer systems and broader network safe.
What should I do if I get an email that doesn't look right?	Please call the Helpdesk, do not send the email to the Helpdesk (or anyone else) but call.
I think I have an email that doesn't look right, but I don't want to bother the Helpdesk. Or should I?	Please call the Helpdesk. Not only will you be doing your part in protecting our computing network, it is also much easier for ICT to have a quick chat than spending days, even weeks, to address any unfavourable outcomes you may introduce into the network.
I still have questions, who do I approach?	Please feel free to reply to this email, give me a call or reach out to the ICT Helpdesk.

Regards,

Brian Strawbridge

Quick links