Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
IT security team reports zero successful phishing clicks in 90 days, urges continued vigilance
Summary
Chief information security officer Ian Sloane said no staff clicked on phishing emails in the last 90 days and described ~50 alerts that were false positives; he stressed continued use of MFA, patching, approved collaboration tools and reporting suspicious items.
Ian Sloane, the agency's chief information security officer, told the executive management team that sustained awareness efforts and targeted training have materially reduced phishing risk. "Over the past 90 days 0 staff clicked on phishing emails and that's huge," he said, describing the result as evidence of effective awareness and training.
Sloane acknowledged the monitoring environment still generates alerts (he said about 50 alerts during the same period) that were investigated as false positives, and said those alerts demonstrate the monitoring tools and triage processes are functioning. He emphasized core defensive steps staff should adopt, including strong unique passwords, multi-factor authentication, keeping systems updated, locking workstations and using approved collaboration tools.
Sloane also warned that advances in malicious tooling, including automated agentic AI, increase the sophistication of attacks and that agencies remain attractive targets because of sensitive data and essential services. He urged staff to report suspicious emails or links promptly to enable early investigation and mitigation.
