ISMS monthly meeting 4

Agenda: the lessons from the phishing campaign against the service desk.

Discussion: two colleagues entered their credentials on the fake login page. Both accounts were reset within the hour and neither held administrator rights. Lotte van Dijk reported that the report button was used quickly once the first message was flagged. The Incident is closed and the register holds no other open Incident.

Decision: the service desk runs a short phishing exercise every quarter. Hans Overbeek asks that mail from sender domains never seen before is held back for a day.