Binance Chief Security Officer Jimmy Su said the exchange regularly tests employee security habits through monthly simulated phishing attacks run by its internal red team. The exercises are designed to measure whether staff behavior is improving over time, and employees who fail the tests are required to complete remedial training. Su said Binance has been conducting these simulations for three to four years. He added that employee security habits were weaker in the early stages of the program, but the company has since seen clear overall improvement. Test results are also included in performance reviews. Repeated failures in phishing simulations can negatively affect an employee’s rating, and in serious, repeated cases, that rating could fall to the lowest level and may ultimately lead to dismissal. The scenarios used in the exercises include red team members posing as recruiters or offering free meeting invitations to collect personal information and gauge employee responses.
Binance Chief Security Officer Jimmy Su said the exchange regularly tests employee security habits through monthly simulated phishing attacks carried out by its internal red team.
According to Su, the goal is to assess whether staff security behavior is improving. Employees who fail the tests are required to undergo remedial training.
Su said Binance has been running these simulated attacks for three to four years. He said employee security habits were still lacking in the earlier stage of the program, while the company has now seen clear overall improvement.
He also said the results are factored into employee performance reviews. Staff who repeatedly fail phishing simulation tests will receive negative impacts on their ratings. In serious and repeated cases, an employee’s rating could drop to the lowest level and may lead to termination.
Simulation scenarios include the red team posing as recruiters or offering free meeting invitations to collect personal information and test how employees respond.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.