Are you at risk of a Corporate Attack?

High profile targeted attacks - such as Aurora and Night Dragon - demonstrate that traditional security used by governments and large corporations are not sufficient for thwarting targeted social engineering attacks. If your organization has significant intellectual property, rich customer data, substantial monetary assets, or is part of a national infrastructure, you could be the next target - if you haven't been one already.

The following questions are designed to help you understand and assess your exposure to targeted social engineering attacks.

  1. Does your company have significant intellectual property, rich customer data, substantial monetary assets, or is part of a national infrastructure that is critical to protect?

    Yes   No
  2. If individuals within your organization receive an email from a trusted sender referencing either personal or professional knowledge, what percentage do you think would comply with a request for information?
    Please select from the following:
    Less than 25%
    Between 25% and 50%
    Greater than 50%
    Don’t know
  3. Have you provided any training to your employees on dangers through email and online threats?

    Yes   No
  4. Do your current email security measures have the capability to evaluate the content and context of the body of an email and identify suspicious requests?

    Yes   No
  5. Do any of your existing security solutions traverse hyperlinks embedded in email messages to determine whether the destination site is attempting to do something malicious - without relying upon known signatures?

    Yes   No
  6. Do you currently monitor the cyber footprint of key employees to help identify email messages that use publicly available information to trick the recipient into performing an action they normally would not do?

    Yes   No
  7. Do you believe your existing security adequately protects you against targeted social engineering attacks?

    Yes   No
  8. Have you been spear phished or targeted by advanced persistent threats in the past?

    Yes   No