Phishing Triage Pocket Deck
Recall the first safe moves for a suspected phishing report.
First moves SAFE What does SAFE mean for phishing triage? Recall the sequence before flipping. Delete vs preserve What should you tell a user who asks whether to delete a suspicious message? Cleanup comes after capture. User objection I already deleted it. Is this still worth reporting? The user thinks evidence is gone. Your line Yes. Please tell me the sender, subject, time received, and whether you clicked or entered anything. I will route that to security so they can search mail logs. Do not shame the user for deleting it; recover the remaining signal. It keeps reporting behavior safe…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in