Security Assessment Tool for Construction

The target is everyone

Social engineering tactics were a common approach, with attackers and security researchers having above average success tricking employees into entering credentials on a spoofed web page, downloading malware or wiring cash. That’s why it’s important for your staff to understand that they’re targets, and to report anything suspicious to your security team right away.

Multi-factor authentication is key

For Web Application attacks, the use of stolen credentials was most common. These might be obtained from a phishing attack or from earlier breaches. Employees reusing their credentials for multiple professional and personal accounts increases the risk for organizations when those credentials are stolen. Multi-factor authentication can reduce your vulnerability.