Phishing Simulation and Security Awareness
Purchase continues to see email phishing scams despite increased awareness and improved countermeasures. Phishing remains a significant threat and our best protection against it is you.
• Be vigilant: Never share your account credentials. Purchase College will never ask for your account password
• Slow down: Think before you click, check destination URLs of links, and be wary of emails demanding urgency.
Warning: If phished, your account will be disabled, requiring support from the CTS Helpdesk to restore access. Additionally, you’ll be required to complete additional security awareness training within 3 weeks, and your supervisor will be informed.
Why We Don’t Announce Phishing Attempts?
Daily campus phishing attempts would require constant email notifications. Instead, we focus on ongoing security training and awareness.
Security Awareness Training & Phishing Simulations
In response to a 2022 SUNY audit, Purchase College has implemented periodic phishing simulations to identify potential risks. We use Microsoft Defender to provide mandatory Security Awareness Training each fall and spring, critical in protecting against the rise in phishing and ransomware attacks. Please note this training is not in the KnowBe4 system.
Last Simulation Results
Our last phishing simulation in Spring ’24 yielded 125 employees and 878 students clicking a malicious link and 40 employees and 419 students providing account credentials, highlighting the importance of continued training. You should use the new Report Email Message button to alert CTS to potential threats and do not reply or forward suspected phishing emails.
Please help protect our college and yourself by completing all training and always thinking before you click. If you need support, contact the Helpdesk Zoom Tech Support (M-Th 8am-6:45pm; F 8am-4:45pm) or submit a work request.
Thank you for your continued vigilance,
Ryan Nassisi
Chief Information Officer & Director
Campus Technology Services
Purchase College - SUNY