Employee threat reporting critical to cyber safety

IN the second quarter of this year alone, companies were hit with close to one million phishing attempts.

- ANNA COLLARD

Making it safe and easy to report potential cyber threats can transform a workforce from passive targets into active defenders.

As these attacks become more sophisticated, businesses are deploying advanced automated defences to hold the line.Yet despite these investments, a critical gap remains in the human layer of security around phishing emails. It’s not a lack of awareness, but a specific behavioural habit: the tendency to simply hit “delete”.

Phishing threat

A phishing email is a fraudulent message designed to look authentic. It usually asks you to click a link, download an attachment or provide personal details in an effort to steal valuable information.

These emails often create a sense of urgency — for example, warning that your account is at risk or offering a time-sensitive reward to pressure you into acting quickly.

Psychology of "delete"

There is a reason why the “Report Phishing Email” button is often the most ignored tool. Deleting is a reflex; while reporting is a decision. For the most part, people simply want to clear the clutter. Deleting a suspicious email feels like “dealing with the problem” — but in reality, it’s merely hiding it.