Specifications include, but are not limited to: It is the intent of this specification to describe the minimum requirements for an effective Managed Security Service for phishing training, awareness, triage, and remediation. The scope of this engagement will be an annual Statement of Work (SOW), with a minimum of 12 phishing campaigns annually, which may include re-phishing repeat clickers. Clickers will see a landing page or other awareness media that will help improve their knowledge of phishing and how to avoid risky behavior. Additional training will be available for repeat clickers. A baseline campaign will be taken at the beginning of each SOW execution, to aid in trend reporting. In addition, there will be a reporting mechanism by which users can report suspicious emails to the MSSP. The MSSP will provide expert managed triage, and will provide assistance in the form of reports and possibly phone support, in the remediation and management of identified malware.
