UA launches phishing awareness program

In the wake of several recent high-impact phishing campaigns, UA is renewing our efforts in regard to our Phishing Awareness Program. This program consists of periodic simulated phishing emails designed to give you a realistic experience in a safe environment, and began last fall with two campaigns.

We will begin sending out emails again at the rate of approximately one per quarter. If you receive one of these emails, we encourage you to treat it as you normally would-by reporting phishing via Google's web interface and/or notifying the UAA Service Desk.

A few days after the email is sent out, we will send out a report indicating what the email looked like, along with statistics regarding how effective the phish was. It is our hope that these simulations will lead to a reduction in the amount of malware infections and compromised accounts that have recently occupied our institution.

What happens if I fall for the phish? If you click on an attachment or link in one of our simulated phishing emails, you will be directed to brief training materials that are designed to educate you on the nature of the attack.

How do I identify a phishing email? You can identify a phishing scam by looking for email messages that:

• Create a sense of urgency • Invoke strong emotions, like greed or fear • Request sensitive data • Contain links that do not appear to match legitimate resources for the organization that is contacting you

If you have questions or concerns, please contact the UAA Call Center.

Thank you! Nathan Zierfuss-Hubbard, CISSP Chief Information Security Officer

June Archive