Question

Question was provided via image upload.

Explanation:

Identify the core objective of phishing response

The question asks for the BEST way to handle a phishing email within an organizational setting.

Evaluate the options

• Option 1: "Forward it to cybersecurity@..." manually forwards the email, which can alter headers and is less efficient than automated reporting tools.
• Option 2: "Delete the email" removes the threat from the individual inbox but fails to alert the security team to protect other users.
• Option 3: "Forward it to the IS Service Desk" is a manual process that increases helpdesk ticket volume unnecessarily.
• Option 4: "Forward it to your direct manager" does not directly alert the security team equipped to mitigate the threat.
• Option 5: "Use the designated Phishing Report button" automatically sends the email with its original metadata and headers directly to the security team, allowing for rapid, automated analysis and organization-wide mitigation.

Answer:

• Forward it to cybersecurity@ochsner.org
• Delete the email
• Forward it to the IS Service Desk
• Forward it to your direct manager
• Use the designated Phishing Report button (Correct answer)