Audit Export Request in the Finance Pod
Recognize a business email compromise style data request and route it through approved verification instead of the message path.
A sensitive export request arrives near end of day. The request sounds businesslike and urgent, but it asks Marcus to move supplier tax data to an unfamiliar location. What should he do? Verify the coordinator in the existing audit workspace or with the controller, then report the message if the request is not confirmed. Right. Sensitive data requests need independent verification, not reassurance from the message. Reporting keeps the suspicious sender, URL, and headers available to security. Export the file but password-protect it before uploading. Weaker. A password does not fix an unverified recipient or destination. The violated principle is…
Sign up free: one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in