Working closely with TARIAN, the Regional Organised Crime Unit, our researchers have developed Not2Phish, a system which tests staff awareness of phishing emails and gives training those who fall victim of these emails.
Not2Phish’s online training includes quizzes and reporting tailored to specific organisations, as well as a simulation feature with real world-based scenarios.
During the pandemic, the Not2Phish team has helped SMEs across Wales combat phishing attacks by providing industry-standard interactive security awareness training - with English and Welsh narration - for employees who are working from home.
Similar platforms to Not2Phish can be too expensive for many smaller business and charities. However, over the past 12 months, Not2Phish has been delivered free to more than 2,500 individuals from SMEs, public sector bodies, and law enforcement institutes in Wales, thanks to a Welsh Government’s Cyber Resilience grant provided to USW and TARIAN.
Amila Perera, Head of Cyber Security at USW’s Newport Campus, and Not2Phish Project Adviser and Product Architect, said: “It is a great pleasure to see that USW is actively contributing to the UK National Cyber Security Strategy by helping small and medium businesses to effectively manage their cyber risk. This initiative also promotes the use of Cyber Essentials as government accreditation for small and medium scale businesses.
“The product could not have achieved this success without the help of a few individuals. Our Cyber students, Jack Tabash and Ana Pereria, worked tirelessly and are still contributing to the project as police support volunteers.
“We have also received the support from USW’s Faculty of Creative Industries (FCI) students to develop the interactive phishing awareness training module content. TARIAN staff provided the Welsh translation and narration support for the training module.”
Not2Phish Project Manager for TARIAN, DS Davies, Detective Sergeant Regional Organised Cyber Crime Unit TARIAN ROCU, said: “The partnership between TARIAN, USW staff and student volunteers and funding from Welsh Government has been innovative and produced an effective phishing attack and training platform that we can offer SME, for free, and reduce their risk from one of the biggest cyber-attack vectors organisations continue to face.”
As a result of its contribution on enhancing cyber resilience in the region, the Not2Phish product has been shortlisted as a finalist in the National Cyber Awards 2020 in the Law Enforcement Cyber Product of the Year category.
SMEs or charities can get access to the service At www.learn.not2phish.co.uk