First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do?

Simply deleting the email without reporting it fails to initiate a security investigation and allows a potential threat to go unaddressed.

Forwarding to a supervisor rather than the security team bypasses the people with technical authority and tools to properly analyze the threat.

Forwarding the suspicious email to the company's dedicated security response team enables trained professionals to investigate a potential phishing campaign or account compromise incident. Permanently deleting it after reporting ensures the malicious content is not accidentally re-opened and follows documented security incident response procedure.

Replying to a potentially spoofed or compromised sender confirms your email address is active and may expose additional information to an attacker.