Which practice helps ensure staff recognize phishing and data misuse?

• A. Staff training
• B. Encryption
• C. Secure storage
• D. Breach response procedures

Answer: (A)

Training staff is the most effective way to ensure they recognize phishing and data misuse. When employees receive clear guidance on what phishing looks like—suspicious emails, unusual requests for credentials or money, urgent language, mismatched sender addresses, or links to unfamiliar sites—they learn to pause, verify the source, and avoid acting on questionable requests. Ongoing training also reinforces safe behaviors through reminders and practice, such as simulated phishing campaigns, which help people recognize real threats in real time and know exactly how to report suspected attempts.

Encryption and secure storage protect data if a breach occurs, and breach response procedures outline how to respond after a security incident. But they don’t directly teach staff to spot phishing or misuse in the moment, which is why training is the best fit for this goal.