KnowBe4
All Saints has partnered with KnowBe4 to support our staff in the realm of cybersecurity, particularly in two ways:
- Security awareness training
- Phishing email extraction
Falling victim to phishing scams can be costly, both in dollars and in trust with our congregation – not to mention the severe inconvenience. We have an obligation to protect our members’ data as part of our stewardship responsibility to them. We also have a financial stewardship responsibility to our congregation. On at least two occasions in the past several years, All Saints staff members have fallen victim to phishing scams – one involving the exposure of our member database, and the other involving financial loss. We have already taken steps to reduce the risk of the former; and our partnership with KnowBe4 reflects steps taken to further reduce both kinds of risk.
For now, please begin reporting phishing emails by using the “Report phishing” option in Gmail –
look for the hook:
Thank you in advance for your vigilance in learning to spot phishing scams, and helping others to do the same.
- - -
Responding to All Saints members reporting a phishing scam. Sometimes, folks will say that it looks like “All Saints got hacked” or the like. Thankfully, the odds are that if All Saints was “hacked,” it was once, several years ago, even if the phishing emails going around are new. But when an All Saints member (or former member) contacts you to notify you of a phishing scam, please reply with a copy-and-paste of the following:
Hi,
Thank you for letting us know. Yes, this looks to be a phishing scam – thank you for not engaging with the sender of this phishing scam. You’re invited to let All Saints know about possible phishing scams by forwarding the phishing email to phishing@allsaintsaustin.org. We may not be able to entirely avoid bad actors, but we'll certainly do what we can, and it’s helpful for our staff to be aware of what is going around. Unfortunately, there’s nothing to keep bad actors from creating phony email addresses and trying to take advantage of people. Thank you for doing your part in being vigilant about cybersecurity!
I also encourage you to report the phishing scam to your email host – for example:
Outlook: How to report phishing
Thank you!