The Verizon DBIR, the Phish Labs’ Phishing Trends & Intelligence Report, and a number of other recent announcements confirm what we all know. Phishing is a popular attack vector. This is an important data point for information security leaders. It also logically leads to two questions:

• Can you stop phishing to secure your enterprise assets?
• If you could stop phishing, what next?

There is a lesson here in building an effective and resilient information security infrastructure that is missing in most enterprises today.