Before/After: Vendor Bank Change
Distinguish same-channel confirmation from a defensible vendor-change callback.
Same vendor-change request, two workflows. What changed? Before: same-channel confirmation inside email. After: trusted callback plus change log. The phone becomes the control: the verifier calls a number already in the vendor master, not a number supplied in the change email. Request and approval separate: one person receives the change; another checks the callback note before activation. The workflow records requester, trusted channel, verifier, date, and field changed, reducing both fraud risk and blame ambiguity. The control is not be careful. The control is a known-good route plus a record. Social Engineering Defense Moved Social Engineering Defense from email confidence…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in