{"id":91752,"date":"2020-08-25T09:00:02","date_gmt":"2020-08-25T16:00:02","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/?p=91752"},"modified":"2023-05-15T23:03:22","modified_gmt":"2023-05-16T06:03:22","slug":"detect-mitigate-phishing-risks-microsoft-security","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/08\/25\/detect-mitigate-phishing-risks-microsoft-security\/","title":{"rendered":"How to detect and mitigate phishing risks with Microsoft and Terranova Security"},"content":{"rendered":"

Detect, assess, and remediate phishing risks across your organization<\/h2>\n

A successful phishing attack requires just one person to take the bait. That\u2019s why so many organizations fall victim to these cyber threats. To reduce this human risk, you need a combination of smart technology and people-centric security awareness training. But if you don\u2019t understand your vulnerabilities, it can be difficult to know where to start. \u00a0Attack simulation training capabilities in Office 365 Advanced Threat Protection (Office 365 ATP) empower you to detect, assess, and remediate phishing risk through an integrated phish simulation and training experience. And, in October 2020, you can get true phishing clickthrough benchmarks when you register for the Terranova Security Gone Phishing TournamentTM<\/sup><\/a>.<\/p>\n

Terranova Security<\/a> is a global leader in cybersecurity awareness training that draws on principles of behavioral science to create\u00a0training content\u00a0that changes user behavior. Through a partnership with Microsoft<\/a>, Terranova Security is able to enrich our training programs with insights from the Microsoft platform, while Microsoft leverages our content and technology in Microsoft Office 365 Advanced Threat Protection (Office 365 ATP).<\/a><\/p>\n

Today\u2019s blog shares how the Gone Phishing Tournament helps you baseline against your industry and peers, and how Office 365 ATP Attack Simulation training can help you mitigate the risk of a phishing-related data breach.<\/p>\n

How does your risk of being phished stack up?<\/h2>\n

Cybercriminals exploit human psychology to trick users, which is why they introduced COVID-19-themed phishing lures<\/a> in the early days of the pandemic. Many employees are working from home for the first time and have children and other family members competing for their attention. Bad actors hope to trick employees when they are busy and stressed. Although it\u2019s understandable why people accidentally act on phishing campaigns, there is an opportunity to turn your employees into your first line of defense. When people understand how phishing campaigns work, your organization is more secure.<\/p>\n

\"An<\/p>\n

 <\/p>\n

The Gone Phishing Tournament will give you valuable insight into how well employees understand phishing. The Gone Phishing Tournament is a free, annual cybersecurity event that takes place in October. The tournament leverages a phishing email based on real-world threats provided by Attack simulation training in Office 365 ATP and localizes it for your audience. After you register<\/a>, you can select the users you want to include in the phishing simulation. We run the simulation for a set number of days using the same template, so you get an accurate assessment of how you compare to peer organizations. At the end of the tournament, you\u2019ll receive a personalized click report and a global benchmarking report.<\/p>\n

Empower employees to defend against phishing threats<\/h2>\n

Phishing simulations are a great way to educate employees about phishing threats, but to shift behavior you need a regular program that includes targeted education alongside simulations. Terranova Security’s awareness training<\/a>, which will soon be available in Office 365 ATP, takes a pedagogical approach with gamification and interactive sessions designed to engage adults. It is localized for employees around the world and complies with web content accessibility guidelines (WCAG) 2.0.<\/p>\n

Later this year, Office 365 ATP Attack Simulator and Training will launch integrated with Terranova Security awareness training. You\u2019ll be able to take advantage of comprehensive training benefits that will help you measure behavior change and automate design and deployment of an integrated security awareness training program:<\/p>\n