Recognise fraudulent messages
Short label: PHISHING
Meaning
Phishing uses a misleading message or call to persuade someone to reveal information, make a payment or open something harmful.
Why it matters
The request may appear to come from a known supplier or colleague.
What you can do
Verify unusual payment or sign-in requests through a known, independent contact method. Report the suspicious message using the company procedure.
Services that can help
Device Shield supports email and account controls. Workshops practise examples with your team; dates and any repeat sessions are agreed in the quote.
Official reference — NIS2 Art. 21(2)(g)
2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
— Directive (EU) 2022/2555 (NIS2), Art. 21(2)
(g) basic cyber hygiene practices and cybersecurity training;
— Directive (EU) 2022/2555 (NIS2), Art. 21(2)(g)
Everyone in the organisation must know the basics and be trained: updates, passwords, what a phishing email looks like.
Read the article on EUR-Lex → · Official text, quoted from the Official Journal of the EU
Acronyms used here: NIS2, GDPR, DORA, CRA
- NIS2 — Network and Information Systems Directive 2
- An EU cybersecurity directive with requirements for organisations covered by its scope.
- GDPR — General Data Protection Regulation
- The EU regulation on personal-data protection. RGPD is the French name and AVG the Dutch name.
- DORA — Digital Operational Resilience Act
- EU rules on digital operational resilience in the financial sector.
- CRA — Cyber Resilience Act
- EU cybersecurity rules for products with digital elements, including certain software and connected devices.