our accountant almost gave business data to someone over the phone, what can be done against such things

oh god same thing happened to us. they scared us so much with the paranoia act that we gave up a password... edit: password changed but the stress remains

Correction: I misremembered the figure, it was a bit lower.

Protocol structure: 1. No identity info over the phone 2. If asked, say 'I'll call you back' 3. Call from official number (search online) 4. If suspicious, consult the accounting manager 5. Done.

simple but effective. anyway since we started doing this employees are more creful and basically nobody gives out data over the phone

Tactics of phone scammers: Urgency (ask for info immediately), Authority (tax inspector), Familiarity (mention a failed transaction). Teach these.

If an employee accidentally gives out info, what does the company do? Punishment or training?

the risk is so high i think you should have held an urgent session. good thing the accountant noticed! social enginneering is annoying

following.

Noted, thanks.

Absolutely. If I were to add anything: An automated scan report is not the same as a penetration test.

Let me clarify the technical side. Hasty decisions become decisions you have to fix six months later.

Trying to do this alone is the most expensive way. If you post the result here, it will help others too.

Good call starting this thread.

my perspective changed after experiencing that. btw everything goes well for the first three months; problems arise in the fourth.

i'm also curious if anyone does it differently.

There are three things to check when doing this. Solutions that work at a small scale collapse when you grow; I learned this late.

Of course, it varies if your situation is different.

Saved.

I feel the same way. Just because everyone does it doesn't mean it's right.

Correct me if Im wrong.

I think it's hard to be that definitive about phone scam business. Security isn't absolute; it's about making attacks not worth the effort.

If you post the result here, it will help others too.

I agree.

Same here.