{
  "timestamp": "2025-02-05T23:27:45.288455",
  "content": "Search Free Trial Get Demo The Hidden Costs of Phishing  BEC August 25, 2022 A couple of months ago we sat down with Damian Stalls, vCIO director at Fluid Networks to discuss how they dramatically reduced the time their security analysts spent managing the problem of phishing, BEC, and user education. Here were some of the highlights from our discussion. Recovering From Successful Attacks Are Painful We identified we had a lot of users that were making silly mistakes and it was costing our company time and money. This is when we decided to implement Security Awareness Training. In the beginning, it was clear that Damian and his team had a reactive approach to email security and incident response. Everything was post event, meaning after a user had clicked something they shouldnt have, costing them a lot of resources to clean up successful attacks. In the recent Osterman report , it takes an average of 175 hours to recover from a successful attack, making it a top concern for security leaders moving forward. Security Training Help or Hinder? Damian implemented security awareness training to help educate and stop his users from getting phished. Whilst they solved the problem of reducing the number of breaches, it created other problems. Damian said it significantly increased the number of reported messages and soon they became overwhelmed with alerts.  One of my customers, a long-term friend of mine says, Hey, what happened to that email I sent you? The ticket I clicked that button on that one email. Was it dangerous? Was it Safe? The Osterman report , indicates that only 22 of organizations investigate all messages reported as suspicious and 84 of organizations saw security awareness training significantly increased the number of tickets  alerts. Security awareness training has created a culture of fear, causing users to forward messages to SOCs to prevent being a victim of an attack. Analysts Are Losing The Battle Damian hired a full-time analyst just to investigate suspicious emails but soon come to realize they needed additional help. My analyst who was doing all the research on these emails, he was the one who is being burned out and I realized that he is losing this battle. Alert fatigue and burnout are a real problem in the industry resulting in delayed, missed or ignored responses to reported messages. On average, organizations spend 5,111 hours per year investigating and remediating email threats at a total operation cost of U.S 311,154 based on average security analyst salary plus benefits for USA U.K 107,959 based on average security analyst salary plus benefits for U.K Try our incident response calculator to find how much it costs your organization to respond to email threats. Eliminate The Time, Pain,  Money At this point Damian started to look for an additional layer of security and found Cyren Inbox Security. Youve completely taken the burden off of our team. You guys are proactively looking in all our users inboxes for any threats. If a user reports a threat, your team is on it to investigate it and respond directly back to the customer, letting them know the results of that reported email. Cyren Inbox Security is a powerful plugin to Microsoft Office 365 that continuously monitors for and automatically remediates email threats, eliminating the time your analysts spend managing this problem. Request a demo today. Try it for Free Instant Data Classification Cyren URL Category Chacker Prev 3 Ways to Optimize Your Security Awareness Training Program What is Microsoft Office 365 Advanced Threat Protection? Next Company Partners Resources Investor Relations Products Freeware Demo Solutions Contact Us Privacy Management Service by Data443",
  "analysis_type": "comprehensive",
  "analysis": "**Comprehensive Analysis of Security Content**\n\n**1. Key Security Features and Benefits:**\n- **Security Awareness Training:** Educates users on recognizing phishing attempts, reducing breaches. However, it increases reported messages, requiring additional resources.\n- **Cyren Inbox Security:** A plugin for Microsoft Office 365 that continuously monitors and automatically remediates threats, alleviating the burden on security analysts.\n- **Cost Calculator Tool:** Helps organizations assess the financial impact of email threats, aiding in resource planning.\n\n**2. Compliance Certifications and Regulatory Adherence:**\n- The content does not mention specific compliance certifications (e.g., GDPR, ISO 27001). Including such information would enhance credibility and user trust.\n\n**3. User-Focused Security Recommendations:**\n- **End-User Tips:** Advise users to be cautious with links/attachments, report suspicious emails, and understand the benefits of automated tools like Cyren.\n- **Encourage Reporting:** Foster a culture where users feel comfortable reporting threats without fear, aiding organizational security.\n\n**4. Technical Security Implementation Details:**\n- **Cyren Inbox Security Integration:** Deployed as a plugin for Office 365, offering seamless integration and ease of use, especially for Microsoft users.\n- **Continuous Monitoring:** The tool operates in real-time, remediating threats automatically and reducing manual intervention.\n\n**5. Data Protection Measures:**\n- **Automated Remediation:** Prevents data breaches by stopping phishing attempts early.\n- **Real-Time Monitoring:** Ensures threats are detected and resolved promptly, minimizing data loss.\n\n**6. Best Practices for End Users:**\n- **Vigilance and Education:** Users should stay informed about phishing tactics and regularly update software.\n- **Training Participation:** Engage in training to improve threat recognition and reporting, despite increased alerts initially.\n\n**Areas for Improvement:**\n- **Compliance Information:** Future content should highlight compliance certifications to reassure users.\n- **Technical Details:** Provide more specifics on implementation beyond plugin functionality to inform technical teams.\n\nThis analysis highlights the strengths of the current content and suggests areas for enhancement to provide a more comprehensive security overview."
}