Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Committee hearing: staff reminded to report suspicious emails as county runs phishing tests
Summary
County staff discussed a March phishing-style email and internal testing; IT advised staff to use Office 365 phishing reporting and forward suspicious messages to the Help Desk for analysis.
During new business, Scott Van Etten asked about a March 11 Paychex onboarding email that some staff received. Cody Ryan explained that Steuben County runs phishing campaigns that sometimes emulate real messages; recipients who click test links are notified and if an email is reported to the Help Desk staff will sandbox and analyze it.
"We do not utilize Paychex and if you report it, then you will get a congratulations message," Ryan said, adding that if the report does not produce a congratulation it should be treated as potentially malicious and sent to the Help Desk for analysis.
Ryan described an Office 365 phishing-reporting button and advised staff to report suspicious emails rather than open attachments or run executables. The committee adjourned after the item; the advice is operational and no formal motion beyond adjournment resulted from the discussion.
