SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What should you do if you receive suspicious emails asking for personal information?

1. Respond to the email cautiously

2. Report the email to your organization's IT department

3. Click on any links to verify

4. Ignore it and delete it

The correct answer is: Report the email to your organization's IT department

The best course of action upon receiving suspicious emails that request personal information is to report the email to your organization's IT department. When you report such emails, you help your organization take appropriate measures to protect all users from potential security threats. Organizations often have processes in place to handle phishing attempts and other types of malicious communications. By forwarding the email to the IT department, you enable them to investigate the threat, warn other employees, and potentially implement preventive measures to safeguard the organization's data integrity. Additionally, reporting these suspicious emails contributes to a culture of security awareness within the organization, reinforcing the importance of vigilance among all employees. The IT department can also provide guidance on how to handle similar emails in the future and ensure that proper training is administered to prevent a successful attack. The importance of this action cannot be overstated as it not only protects your personal information but also contributes to the overall cybersecurity posture of the organization.