SECURITY LEADERS MUST BREAK DOWN EMPLOYEES’ COGNITIVE BIASES
Cybercriminals purposefully use fear, authority/hierarchy, and familiarity tactics to trick end users into clicking links or opening viral attachments. Phishing emails are highly effective today because workers have been conditioned to have an immediate response to them, particularly remote workers.
The impact of these biases on the business is defined by frequency and by severity. How frequently the bias is used is a strong indicator of the probability of the event occurring. Most people have received some type of phishing email based on the halo effect and hyperbolic discounting biases. Given the frequency of these types of phishing emails, there is a high likelihood that employees will fall prey to it.