Business Email Compromise: articles and guides

A practical 30-day security awareness program for small businesses: owner, five core topics, weekly actions, a fair first phishing test, metrics that matter (report rate), free and paid options, and a printable checklist. Anchored on NIST SP 1300 and CISA Secure Our World.

Attackers impersonate executives — increasingly with AI voice and video deepfakes — to authorise fraudulent payments and access. How the attack works, who is exposed, and how to defend.