How do your users verify legitimate IT/security requests?
Source Reddit Cybersecurity
Discussion
This content is a discussion prompt on Reddit about how users verify legitimate IT or security requests. It is not a report of a specific vulnerability or active threat but rather a solicitation for feedback on a potential problem related to impersonation of IT/helpdesk/security personnel.
r/cybersecurity (opens in a new tab)u/mcsaac0 points0 comments
Hey all! I’m kicking around a product idea and trying to figure out if the problem is actually worth solving.
The general idea is around IT/helpdesk/security impersonation. Basically, if someone reaches out to an employee claiming to be from IT or security and asks them to do something, how does that employee actually know the person is legit?
I’m not selling or advertising anything, just trying to get honest feedback from people who deal with this stuff in the real world.
If you work in security, IAM, IT, helpdesk, GRC, etc., I’d really appreciate it if you took a few minutes to fill this out: