I.0130Indicator
Reports phishing emails without clicking
An observed identity flags suspected phishing messages promptly without interacting with malicious links.
Classification
- Risk domain One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
- Category
- Evidence level
- Maturity practices One capability a program performs, scored on its own: See, Understand, Act, Prove, Govern and Culture.
- Mappings
-
Indicators carry no mappings of their own; the signals in the same risk domain do.
Related signals (same domain, dimension and polarity)
8- Reports simulated phishing SE-B-10
- Reports real phishing SE-B-11
- Reports within one hour of delivery SE-B-12
- Identifies voice simulations SE-B-13
- Verifies requests out of band SE-B-14
- Deletes suspicious mail without engaging SE-B-15
- Reports safe mail as suspicious SE-B-16
- Reports SMS and voice lures SE-B-17
Cite this term
"Reports phishing emails without clicking" (I.0130), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/indicators/i-0130-reports-phishing-emails-without-clicking
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.