I.0019Indicator
Replies to flagged phishing emails after warning
Replies to emails already marked as phishing despite warnings, increasing engagement with attackers.
Classification
- Risk domain One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
- Category
- Evidence level
- Maturity practices One capability a program performs, scored on its own: See, Understand, Act, Prove, Govern and Culture.
- Mappings
-
Indicators carry no mappings of their own; the signals in the same risk domain do.
Related signals (same domain, dimension and polarity)
10- Clicks simulated phishing links SE-B-01
- Submits credentials to simulations SE-B-02
- Opens simulated attachments SE-B-03
- Clicks links in real phishing SE-B-04
- Deceived by voice simulations SE-B-05
- Clicks SMS simulations SE-B-06
- Scans simulated QR codes SE-B-07
- Repeat clicker (3+ in 180 days) SE-B-08
- Replies to or engages with suspicious senders SE-B-09
- Grants remote access to an unverified party SE-B-18
Cite this term
"Replies to flagged phishing emails after warning" (I.0019), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/indicators/i-0019-replies-to-flagged-phishing-emails-after-warning
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.