FAQs
Have Questions?
How often should employees go through phishing training?
Annual training meets the minimum bar for most cyber insurance and compliance requirements, but quarterly short modules with monthly simulations produce much better results. CinchOps builds the training cadence into a managed program so it does not depend on someone remembering to schedule it.
What is business email compromise and how is it different from regular phishing?
Business email compromise is when an attacker impersonates a person your team trusts, like an executive or a vendor, to trigger a wire transfer or a data release. It rarely uses malicious links or attachments, so email filters often miss it. The defense is sender verification habits plus payment process controls.
Will simulated phishing tests upset our employees?
Done badly, yes. Done well, no. CinchOps simulations are designed to teach, not to embarrass. When a user clicks, they get a short training module rather than a public reprimand. Click rates drop quickly when the program feels like coaching instead of a gotcha.
Do we still need phishing protection if we use Microsoft 365 with built-in security?
Microsoft 365 has reasonable built-in protection, but it works best when combined with sender authentication settings configured correctly, user training, and a layer that catches what the built-in filter misses. Most Houston businesses on Microsoft 365 still see phishing reach inboxes weekly.
How quickly can CinchOps roll out a phishing program?
Initial deployment of email filtering takes a few days. Training enrollment and the first simulation usually run within the same month. Measurable improvement in click rates typically shows up within three months when the program is consistent.