Certainly! Here’s a concise summary of the key points regarding scenarios that warrant a second look:
Requests That Require Extra Verification
1. Supplier Bank Details Change
- Confirm any bank detail changes directly with the supplier using existing contact information, avoiding numbers provided in the suspicious email.
- Follow the FTC’s guidance to verify unexpected messages through trusted contact details.
- Ensure verification of new details beyond just agreement from colleagues, as they may not independently confirm authenticity.
2. Familiar Contact Requesting Files
- Before sharing a folder, check its contents to avoid disclosing unnecessary sensitive information.
- Limit sharing to specific files needed, and ensure access is regularly reviewed and controlled through approved platforms.
3. IT Support Caller Requesting Access
- Verify the IT support request using established company contact methods rather than engaging with the caller’s request directly.
- Ensure employees understand what is being requested during support sessions; treat unexpected login prompts with caution.
These practices can help safeguard sensitive information and prevent potential phishing or unauthorized access incidents.
