Educause Security Discussion mailing list archives

Re: Self-Phishing - show of hands


From: Dennis Duncan <dduncan () CORD EDU>
Date: Thu, 11 Feb 2016 16:23:15 +0000

1.       We run phish tests against all employee accounts, Faculty & Staff

2.       KnowBe4.com

3.       Since the start of the school year, September 2015

Along with the phishing email campaigns, we also have employees go through KnowBe4's security awareness training.  This 
training has been very well received by our community.

--
Dennis Duncan, CISSP
Director, IT Infrastructure Services
Information Security Officer
CONCORDIA COLLEGE│901 8TH ST S│MOORHEAD, MN 56562
ph: 218.299.4192 │ dduncan () cord edu<mailto:dduncan () cord edu> │ www.cord.edu<http://www.cord.edu/>

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Eric 
Weakland
Sent: Thursday, February 11, 2016 9:38 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Self-Phishing - show of hands

Greetings,

I'm working on a publication on self phishing for HEISC and preparing to leverage our self-phishing service (SANS) in 
the coming year.  I am trying to develop a list of universities who are doing "self phishing".

If your institution is self phishing your community - would you mind dropping me a note with the following items.

Who are you phishing? (Select groups, All Staff, All Faculty, All Students, everyone etc.)
What are you using? (Vendor, custom or opensource and the name of the vendor or project.)
How long have you been phishing your customers?

Thanks everyone!

Regards,

Eric Weakland, CISSP, CISM, CRISC
Director, Information Security
Office of Information Technology
American University
eric at american.edu
202.885.2241

_____________________________________________
Emails from IT asking you to log in with a link are scams!

Current thread: