Two weeks after a spear phishing attack against the unclassified email system of the Joint Chiefs of Staff, Federal Chief Information Officer (CIO) Tony Scott suggested at the August 11 FITARA Forum that agencies provide a little cyber education to their work force.
Scott credited Transportation Department CIO Richard McKinney with coming up with the idea.
“He said we should have a test phishing email, and if you click on it, you’re automatically signed up for a cybersecurity course, and you can’t do anything else until you’ve completed the course,” Scott said. “I think that’s one we may go implement.”
A spear phishing attack that occurred on about July 25 affected approximately 4,000 military and civilian personnel.
The Pentagon restored the email network on August 10.
DoD spokeswoman Lt. Col. Valerie Henderson said an investigation showed that the network had been cracked through a “broad phishing campaign.”
Join the conversation. Post a comment below or email me at bglanz@300brand.com.