WHAT YOU WILL LEARN
Learning objectives
- Recognize authority, urgency and secrecy tactics
- Verify unusual requests without accusation
- Distinguish mistakes from malicious intent
Look for process exceptions
A request to bypass an approval, keep a transfer secret or send a recovery code is more significant than the sender’s apparent seniority. Attackers use authority and time pressure to make verification feel impolite. A documented verification rule makes the response routine instead of personal.
Handle insider risk fairly
Insider incidents can involve mistakes, compromised accounts or deliberate misuse. Look at observable actions and access needs, not personal characteristics. Limit access to job requirements, review changes when roles change, and provide a clear channel for reporting concerns.
APPLIED EXAMPLE
Put it in context
Someone claiming to be an executive asks finance to urgently change a payment destination. Finance follows the normal independent callback and approval process, even though the message says the executive cannot be reached.
Illustrative scenario for learning, not a claim about a verified customer incident.Common mistakes
- Assuming seniority removes verification
- Sharing codes to be helpful
- Accusing someone without evidence
Your practical checklist
Checklist ticks are temporary and are not recorded as account progress.
MINI RECAP
Make verification a normal business step. It protects helpful people from being pushed into unsafe exceptions.
Put your understanding to the test.
OPTIONAL NEXT STEP · PRO
Turn a suspicious message into a defensible handoff.
The released SOC phishing-triage lab provides synthetic email, web and identity evidence, practical decisions and worked rationales.
See the SOC phishing-triage lab →
Your current Pro membership is recognised. Open your Pro collection or manage your existing membership.
Recurring membership. Both plans include the same available Pro collection. Compare the complete offer.
Already a member? Log in or manage your membership before purchasing again.
Free lessons, quizzes and Simulation A stay free.