Everything comes in through your mailbox, and opening it is your job
Nobody in an organisation opens as many files from outside as an administrative assistant: invoices, reminders, unsolicited applications, quotes, expense claims, contracts to sign. Opening them is legitimate — it is the definition of the job — and that is what makes this desk the preferred entry point for attacks. The most profitable fraud is not spectacular: it is an invoice that looks perfectly correct, from a real supplier, with a modified account number. The courses install a short check, sized for the real volume of the desk, and a rule with no exception: every change of bank details is checked by telephone on a number you already know.


