Exam CISM topic 1 question 444 discussion

D. Educating users Phishing: users

D. Educating users: Educating users about phishing attacks is crucial because it empowers individuals to recognize and respond appropriately to phishing attempts. When users are trained to identify suspicious emails, links, and requests, they can play an active role in preventing data loss due to phishing attacks. Training helps create a human firewall that complements technical security measures.

Phishing won't necessarily come through as 'spam'. An example being if hackers get hold of the CEO's email account. It's D

D because Phishing can occur not only clicking links , Vishing is an example and users talk to give confidential info.

Users might not be even aware that they are phished . A DLP would better protect data

D-Educating users since they are the weakest link in social engineering .

D. Educating users