--- title: 5 phishing mistakes every organization makes and how to prevent them description: Using the five most common phishing mistakes made by organizations, we will teach you how to prevent a phishing attack. Read on to stay protected! image: https://www.smartlockr.io/hubfs/Blog-Post-SmartLockr2%20-%20Phishing%20attack%20plan%20(1).webp --- [![Smartlockr logo](https://www.smartlockr.io/hubfs/Smartlockr-logo.png) ](https://www.smartlockr.io/en?hsLang=en) - Product - [Product overview ](https://www.smartlockr.io/en/product?hsLang=en) - [Integrations ](https://www.smartlockr.io/en/integrations?hsLang=en) - Customers - [Case studies ](https://www.smartlockr.io/en/blog/tag/casestudy) - Team - [Management ](https://www.smartlockr.io/en/teams/management?hsLang=en) - [IT specialist ](https://www.smartlockr.io/en/teams/it-specialist?hsLang=en) - [CISO ](https://www.smartlockr.io/en/teams/ciso?hsLang=en) - [End user ](https://www.smartlockr.io/en/teams/end-user?hsLang=en) - Branches - [Healthcare ](https://www.smartlockr.io/en/branches/secure-email-healthcare?hsLang=en) - [Municipalities ](https://www.smartlockr.io/en/branches/secure-email-municipalities?hsLang=en) - [Finance ](https://www.smartlockr.io/en/branches/secure-email-financial-services?hsLang=en) - [Legal ](https://www.smartlockr.io/en/branches/secure-email-legal-industry?hsLang=en) - [Education ](https://www.smartlockr.io/en/branches/secure-email-education?hsLang=en) - [Recruitment ](https://www.smartlockr.io/en/branches/secure-email-recruiters?hsLang=en) - [Housing associations ](https://www.smartlockr.io/en/branches/secure-email-housing-associations?hsLang=en) - [Pricing ](https://www.smartlockr.io/en/pricing?hsLang=en) - Resources - [Blog ](https://www.smartlockr.io/en/blog) - [Guides ](https://www.smartlockr.io/en/resources?hsLang=en#guides) - [Webinars ](https://www.smartlockr.io/en/resources?hsLang=en#webinars) - [Videos ](https://www.smartlockr.io/en/resources?hsLang=en#videos) - [Partners ](https://www.smartlockr.io/en/partners?hsLang=en) - Company - [Contact ](https://www.smartlockr.io/en/contact?hsLang=en) - [Support ](https://support.smartlockr.io/hc/en-us?hsLang=en) - [Request more licenses ](https://www.smartlockr.io/en/request-more-licenses?hsLang=en) - [Who we are ](https://www.smartlockr.io/en/about-us?hsLang=en) - [Jobs ](https://www.smartlockr.io/en/careers?hsLang=en) [![Free Consultation](https://no-cache.hubspot.com/cta/default/6122972/846d7346-3e53-4811-b976-8a3dd0a3f9ee.png)](https://cta-redirect.hubspot.com/cta/redirect/6122972/846d7346-3e53-4811-b976-8a3dd0a3f9ee) # 5 phishing mistakes every organization makes and how to prevent them [ Smartlockr ](https://www.smartlockr.io/en/blog/author/smartlockr) Jul 28, 2022 --- ![5 phishing mistakes every organization makes and how to prevent them](https://www.smartlockr.io/hubfs/Blog-Post-SmartLockr2%20-%20Phishing%20attack%20plan%20(1).webp) Human error is the cause of a data breach within an organization in no less than 74% of cases. And that's not surprising, because employees are in the front line when it comes to malware and virus attacks that come in via phishing emails. But before anyone clicks on a malicious link, in many cases something has already gone wrong in preventing a phishing attack. In this blog, we take you through the 5 most common mistakes made by organizations. In addition, we give tips on how you can prevent phishing attacks within your organization.     ## Mistake 1: The CISO and security department are trained on phishing, but the rest of the company is not It is the responsibility of management and security to educate everyone in the organization on phishing. Only 1 in 5 companies has trained its employees to recognize a phishing attack. This while in 74% of cases a person is responsible for a data breach (for example by clicking on a link). As an organization, therefore, make sure that the entire company receives regular training in phishing. Preferably in a classroom setting, so you can be sure that everyone actually gets the message. If this is not possible, make sure there is enough written and video material about phishing and that your employees really read it. We have published some helpful blog posts that you can use to educate your employees: - [These 5 departments/companies could soon become a phishing target](https://www.smartlockr.io/en/blog/departments-or-companies-soon-become-phishing-targets?hsLang=en) - [How to spot a phishing email: 8 warning signs](https://www.smartlockr.io/en/blog/how-to-spot-a-phishing-email-warning-signs?hsLang=en) - [Spear Phishing: Why email scamming is a growing concern](https://www.smartlockr.io/en/blog/spear-phishing-why-email-scamming-is-growing-concern?hsLang=en) - [Phishing vs Spear phishing: There is a lot of phish in the sea](https://www.smartlockr.io/en/blog/phishing-vs-spear-phishing?hsLang=en)   ## Mistake 2: Emails arrive uncontrolled Cybercriminals love email because it is the easiest access to the most important data within your company. A whopping 91% of cyber attacks [start with an email](https://www2.deloitte.com/my/en/pages/risk/articles/91-percent-of-all-cyber-attacks-begin-with-a-phishing-email-to-an-unexpected-victim.html) and 98% of organizations using Office 365 have phishing emails in their inbox. Yet there are still many companies that do not have email security installed. Probably because many companies think that the spam filter protects them sufficiently. Unjustly, because these spam filters cannot recognize [spear phishing attacks](https://www.smartlockr.io/en/blog/spear-phishing-why-email-scamming-is-growing-concern?hsLang=en), for example. So make sure your company uses an email security solution like ours. More information about our easy to implement solution can be found [here](https://www.smartlockr.io/en/product?hsLang=en). ![Spam folder](https://www.smartlockr.io/hs-fs/hubfs/spam-folder.webp?width=752&height=376&name=spam-folder.webp)   ## Mistake 3: Thinking phishing won't happen to you Thinking a phishing attack won't happen to you is one of the biggest mistakes you can make. Every company holds valuable data for cybercriminals, and anyone in your organization can become a victim. So make sure you are not surprised by an attack, but prepare well. You can do this by drawing up an email security plan in which you take several measures. You can find more information about this at error 5. ## Mistake 4: Ignoring phishing via other platforms Although most phishing attacks are carried out via email, a third of IT and security professionals have experienced an increase in phishing via other platforms in the past year. These include video conferencing platforms such as Microsoft Teams (44%), messaging platforms for employees such as Slack (40%), cloud based file sharing platforms such as Google Drive (40%) and SMS (36%). The training given within organizations is often only about phishing via email. So make sure you are the one who does prepare for phishing via other platforms. ![Man using phone](https://www.smartlockr.io/hs-fs/hubfs/man-using-phone.webp?width=752&height=376&name=man-using-phone.webp)   ## Mistake 5: Implementing only 1 measure It is not enough to train your employees once in phishing. The techniques change every day, and the places where the attacks happen are also expanding (other platforms). In addition, you cannot rely on just a spam filter or an email security solution. You need to have a phishing attack plan today that takes multiple attack techniques into account. Your plan should for example include periodic phishing training, an alert function or place for all employees to forward attacks to, installing an email security solution, and making sure all your programs are always updated. Could you use some help creating a phishing attack plan? Or don't have an email security solution yet? Contact us through our [website](https://www.smartlockr.io/en/contact?hsLang=en)!   [![Probeer nu vrijblijvend](https://no-cache.hubspot.com/cta/default/6122972/52b43707-908b-4865-b6f1-01acc88d92d2.png)](https://cta-redirect.hubspot.com/cta/redirect/6122972/52b43707-908b-4865-b6f1-01acc88d92d2)   [Phishing](https://www.smartlockr.io/en/blog/tag/phishing) [![secure communication](https://www.smartlockr.io/hs-fs/hubfs/secure-communication-bp.png?width=336&name=secure-communication-bp.png)](https://www.smartlockr.eu/en/request-demo?hsLang=en)   ### Whitepapers - [Is it safe to store data in a US-based Cloud provider?](https://www.smartlockr.eu/en/whitepaper-is-it-safe-store-data-us-cloud-provider?hsLang=en) - [Good cop, bot cop: the truth about AI, ML and your privacy](https://www.smartlockr.eu/en/whitepaper-ai-ml-and-data-privacy?hsLang=en) - [The 8 things you can expect from a partnership with Smartlockr](https://www.smartlockr.eu/en/whitepaper-things-you-can-expect-from-partnetship-smartlockr?hsLang=en) - [How to choose the right secure email solution?](https://www.smartlockr.eu/en/how-to-choose-the-right-secure-email-solution-whitepaper?hsLang=en) - [Keep your organization free of data leaks](https://www.smartlockr.eu/en/keep-organization-free-of-data-leaks?hsLang=en) - [Smartlockr & Workspace 365: Prevent data breaches, work and communicate more securely](https://www.smartlockr.eu/en/safe-emailing-and-safe-workplace?hsLang=en) ### Popular Post [ Oops, I sent an important email to the wrong recipient. What now? ](https://www.smartlockr.io/en/blog/sent-email-to-wrong-recipient-what-now?hsLang=en) [ Is Microsoft 365 GDPR-compliant? Spoiler alert: no ](https://www.smartlockr.io/en/blog/is-microsoft-365-gdpr-compliant?hsLang=en) [ Recall sent emails to protect data: block emails, files and recipients ](https://www.smartlockr.io/en/blog/recall-sent-email?hsLang=en) [ Why Pentesting is a must for banks and financial services ](https://www.smartlockr.io/en/blog/why-pentesting-is-a-must-for-banks-and-financial-services?hsLang=en) [ Preventing misdirected emails with files and recipients confirmation ](https://www.smartlockr.io/en/blog/confirmation-on-files-and-recipients?hsLang=en) ## Similar posts ### [What is phishing and how can you prevent it?](https://www.smartlockr.io/en/blog/phishing?hsLang=en) Phishing is an online scam. Find out everything you need to know about all the different forms of phishing and how to protect yourself from these... Phishing Feb 20, 2023 ### [These 5 departments/companies could soon become a phishing target](https://www.smartlockr.io/en/blog/departments-or-companies-soon-become-phishing-targets?hsLang=en) Anyone can fall victim to a phishing attack, but these 5 teams and companies should be extra careful, as they are fast becoming a favorite phishing... Phishing Jul 22, 2022 [![Smartlockr logo](https://www.smartlockr.io/hubfs/smartlockr-logo2.png) ](https://www.smartlockr.io/nl/?hsLang=en) **Netherlands: **H.J.E Wenckebachweg 123 1096 AM, Amsterdam Kvk: 61781614 BTW-nr: NL854485685B01   ### Contact - Netherlands: +31 (0) 20 244 03 50 - Sweden: +46 81 211 29 68 ### Smartlockr - [Terms & Conditions](https://www.smartlockr.io/en/general-terms-and-conditions-smartlockr?hsLang=en) - [Privacy Statement](https://www.smartlockr.io/en/privacy-statement?hsLang=en) - [Smartlockr A-Z](https://www.smartlockr.io/en/smartlockr-a-z?hsLang=en) - [Status of our services](https://www.smartlockr.io/en/status-of-our-services?hsLang=en) ### Support - [Help Center](https://support.smartlockr.io/hc/en-us?hsLang=en) - [FAQ](https://support.smartlockr.io/hc/en-us/categories/5354862458012-FAQ-and-information?hsLang=en) - [Need help? Download TeamViewer](https://get.teamviewer.com/smartlockr) © 2026 Smartlockr All rights reserved ![BC Certified logo_ISO 27001-2022 RVA_ENG](https://www.smartlockr.io/hs-fs/hubfs/BC%20Certified%20logo_ISO%2027001-2022%20RVA_ENG.jpg?width=303&height=80&name=BC%20Certified%20logo_ISO%2027001-2022%20RVA_ENG.jpg) ![NEN 7510 certificate Smartlockr](https://www.smartlockr.io/hs-fs/hubfs/BC-Certified-logo_NEN7510-1-2017_RVA_ENG.png?width=320&height=85&name=BC-Certified-logo_NEN7510-1-2017_RVA_ENG.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Smartlockr", "url" : "https://www.smartlockr.io/en/blog/author/smartlockr" }, "dateModified" : "2023-09-13T08:37:01.763Z", "datePublished" : "2022-07-28T11:07:56.000Z", "headline" : "5 phishing mistakes every organization makes and how to prevent them", "image" : [ "https://www.smartlockr.io/hubfs/Blog-Post-SmartLockr2%20-%20Phishing%20attack%20plan%20(1).webp" ], "mainEntityOfPage" : { "@id" : "https://www.smartlockr.io/en/blog/phishing-mistakes-and-how-to-prevent-them", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.smartlockr.io/hubfs/SL-logo@3x.png" }, "name" : "Smartlockr" } } ``` ```json { "@context" : "http://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "", "addressLocality" : "Amsterdam", "addressRegion" : "Noord Holland", "postalCode" : "", "streetAddress" : "H.J.E. Wenckebachweg 123 " }, "alternateName" : "AttachingIT", "areaServed" : { "@type" : "GeoCircle", "geoMidpoint" : { "@type" : "GeoCoordinates", "latitude" : "52.336690", "longitude" : "4.929430" }, "geoRadius" : "150 km" }, "description" : "Secure email and file sharing for businesses that handle privacy sensitive data", "email" : "sales@smartlockr.eu", "image" : "https://www.smartlockr.io/hubfs/homepage-en.png", "logo" : "https://www.smartlockr.io/hubfs/Smartlockr-logo.png", "mainEntityOfPage" : { "@id" : "https://www.smartlockr.io/en/blog/phishing-mistakes-and-how-to-prevent-them", "@type" : "WebPage", "description" : "Using the five most common phishing mistakes made by organizations, we will teach you how to prevent a phishing attack. Read on to stay protected!" }, "name" : "Smartlockr", "sameAs" : [ "https://www.linkedin.com/company/smartlockr/", "https://www.youtube.com/@smartlockr9354", "https://www.instagram.com/smartlockr/" ], "telephone" : "+31 (0) 20 244 03 50", "url" : "https://www.smartlockr.io/" } ``` ```json { "@context" : "https://schema.org/", "@type" : "WebSite", "description" : "Secure email and file sharing for businesses that handle privacy sensitive data", "name" : "Smartlockr", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.smartlockr.io/hs-search-results{search_term_string}" }, "url" : "https://www.smartlockr.io/" } ```