Te Rito - Cyber Security

What does this yellow highlighted ribbon in an email mean?

• Don’t trust this email, it's dodgy

• Be careful, check the authenticity of the email and attachments

• It's there for others and not for me

• It’s already been inspected by IT Services

Answer explanation

This banner shows that the email comes from outside of our email system and therefore while we do our best to filter virus attached emails but you should still take care to ensure the authenticity of the email and it's sender

How many reported cyber security attacks are there in Aotearoa each year?

What is the reported financial loss of these attacks?

• 7,500-10,000

  $15-20million

• 5,000-7,500

  $10-15million

• 2,500-5,000

  $5-10million

• 0-2500

  $1-5million

Answer explanation

From the graph, you can see the Cyber Security has significantly increased since 2017.

Although the number of attacks has increased, the financial losses has recently slowed.

This speaks to the importance of everyone's responsibility and awareness in identifying threats, preventing financial losses.

What are attackers targeting?

• Our information to on sell to others

• Money

• Our systems to hold us to ransom

• All of these

Each pay cycle, kaimahi get an email indicating their pay slip is ready.

Is this payslip email example legitimate and can the link be clicked on?

• Yes

• No

Answer explanation

You can see the email address and domain name is from DatacomPayroll.co.nz which is the payroll system that Emerge Aotearoa uses.

What should you do when you see a link in an email?

• Forward the email to IT Services

• Hover over the link to find out the address. Verify it's safe to click

• Delete the email

• Click the link

If you accidentally click on a scam email, what should you do?

• Turn off the computer immediately

• Turn a blind eye

• Report the scam email to IT services

• Keep clicking until something happens

Answer explanation

You will never be penalised or disciplined for mistakenly clicking on a scam email the goal from your realisation is speedy identification and containment of consequence.

If you believe you have identified a scam email in your inbox with certainty, what shouldn't you do with it?

• Click the link to see if it really is a scam.

• Discuss the email with your coworkers in a considered way

• 
• Talk to IT Services to confirm the email is a scam and ask what the correct course of action is

Answer explanation

The new report message button in Outlook is provided by our Phriendly Phishing team, there are 3 options,

Junk - for when a message is spam but not actively malicious, like marketing

Phishing - for when the message is trying to get you to provide data or money

Not Junk - for emails that you do want to keep coming into your inbox

What is an indicator that helps you to tell if an email is from a safer sender?

• Look at the email address. Do you recognise who it's from?

• Look at the email subject. Is this subject relevant to you?

• Look for the yellow ribbon. If you can see this, don't trust the email.

• You can't tell, you just have to use your personal judgement.

Who is responsible for preventing Emerge from falling victim to a cyber attacks?

• IT Services

• Me

• CEO

• Emerge Aotearoa's Board

• All of these

What tactics can Cyberattackers use to cause you to unknowingly help them?

• Urgency:

  Content that implies a quick reaction is needed

• Call to action: Asking you to click the link or attachments

• Language: Confusing or ambiguous words that prey on curiousity

• All of these

• Grammar and spelling: using less than perfect construct to seem more casual