Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
LCB reports no successful phishing clicks in 90 days; emphasizes MFA and reporting
Summary
Ian Sloan told the board that over the past 90 days no staff clicked on phishing emails, credited sustained awareness and training, and urged use of multi‑factor authentication, approved collaboration tools, and prompt reporting of suspicious emails.
Ian Sloan, the Liquor and Cannabis Board's chief information security officer, told the meeting that sustained awareness efforts and targeted training have paid off: "Over the past 90 days 0 staff clicked on phishing emails and that's huge," he said, crediting staff vigilance for materially reducing exposure to credential theft and business‑email compromise.
Sloan said the agency recorded 50 security alerts during the same period; none were confirmed incidents and most were false positives or routine system behavior identified by monitoring tools. He urged staff to enable multi‑factor authentication, avoid unapproved cloud services, report suspicious emails immediately, and follow approved tools and processes. Sloan framed human behavior and training as key defensive layers and recommended contacting the service desk when staff suspect a threat.
