MENU
An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?
Suggested Answer: C
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
SH
Shawana
10 months ago
D is just overkill, disabling emails won't solve the problem.
TI
Tien
11 months ago
B seems too limited, training should be for all staff involved.
LI
Lizbeth
11 months ago
Surprised this is a trend! Didn't realize CEOs were targeted like this.
LI
Ling
11 months ago
I don't think suspending wire transfers is practical.
TE
Teddy
11 months ago
C is definitely the best choice here. Staff need to be aware!
JO
Joye
12 months ago
Disabling emails for staff seems extreme and could hinder operations. I think option C makes the most sense, but I’m not completely confident.
WI
Willetta
12 months ago
I feel like we practiced a similar question where training was emphasized. Providing awareness training to the CEO seems important, but I wonder if that's enough.
TE
Tegan
12 months ago
I'm not entirely sure, but I think temporarily suspending wire transfers might just delay the problem instead of solving it.
AI
Aimee
1 year ago
I remember discussing how awareness training for staff can really help in recognizing phishing attempts. It seems like option C could be the best choice.
DI
Dianne
1 year ago
I've seen questions like this before, and the best answer is usually about training and awareness. Disabling emails or suspending wire transfers could create other issues, so I'll go with the option that focuses on educating the people who are most vulnerable to this type of attack.
FR
Frank
1 year ago
Providing awareness training to the CEO and staff responsible for wire transfers seems like the most logical approach here. Educating the key people involved is crucial for reducing the risk of this type of phishing attack.
MA
Marguerita
1 year ago
Hmm, I'm a bit unsure about this one. Suspending wire transfers seems like it could be too drastic, and disabling emails for staff seems like it might cause more problems than it solves. I'll have to think this through carefully.
NI
Nikita
1 year ago
This seems like a straightforward question about mitigating phishing risks. I'll carefully consider each option and choose the one that best addresses the specific threat described.
VI
Vicki
2 years ago
Ha! Disabling emails for the wire transfer team? That's like asking them to do their job with one hand tied behind their back. C) is definitely the way to go.
AU
Audrie
2 years ago
B) Provide awareness training to the CEO for this type of phishing attack.
CR
Cristina
2 years ago
A) Temporarily suspend wire transfers for the organization.
OL
Olive
2 years ago
C) Provide awareness training to staff responsible for wire transfers.
TI
Titus
2 years ago
I'm with Yolande on this one. C) is the most comprehensive and sustainable solution. Gotta love those phishing scams, always keeping us on our toes!
CA
Caprice
2 years ago
I see your point, Mitsue, but long-term prevention through education is key to mitigating risks.
ST
Stefan
2 years ago
B) is not a bad idea, but the CEO isn't the one responsible for the wire transfers. Focusing the training on the relevant staff members is the smart move here.
AN
Antonette
2 years ago
A) Temporarily suspend wire transfers for the organization.
KR
Kristin
2 years ago
C) Provide awareness training to staff responsible for wire transfers.
VI
Vincent
2 years ago
I think C) is the way to go. Educating the staff on phishing tactics is the most effective long-term solution. Disabling emails might work, but it's like putting a Band-Aid on a bullet wound.
YO
Yolande
2 years ago
C) Provides the best solution by addressing the root cause of the problem - the lack of awareness among the staff responsible for wire transfers. Suspending wire transfers or disabling emails are temporary fixes that don't address the underlying issue.
LA
Larae
2 years ago
B) Provide awareness training to the CEO for this type of phishing attack.
EL
Elenore
2 years ago
A) Temporarily suspend wire transfers for the organization.
AN
Angelyn
2 years ago
C) Provide awareness training to staff responsible for wire transfers.
MI
Mitsue
2 years ago
But wouldn't temporarily suspending wire transfers be a more effective immediate solution?
CA
Camellia
2 years ago
I agree with Johanna, educating the staff is crucial in preventing phishing attacks.
JO
Johanna
2 years ago
I think the best way is to provide awareness training to staff responsible for wire transfers.