When you return to your desk after a lunch break, you notice a strange email in your inbox. The sender is someone you did business with recently, but the subject line has strange characters in it. Wha

Forwarding the suspicious email to the security response team ensures trained professionals can analyze it for phishing, malware, or social engineering without putting the organization at further risk. Permanently deleting it afterward prevents accidental interaction while maintaining the security team's copy for investigation.

Replying to the sender could confirm your email address as active to an attacker, trigger a malicious auto-response, or further expose you to a social engineering attempt.

Deleting the email without reporting it deprives the security team of a potentially important threat indicator and violates standard incident reporting procedures.

A supervisor is not the appropriate first contact for a potential security incident - the security response team has the tools and authority to properly investigate and contain a threat.