Report suspicious communications

• Establish processes for employees to report incidents. Make sure that they know who to inform if they receive suspicious messages; this can be a specific role at the company or a general inbox set up to this end.
• Make sure you know the external resources available to this end, for example: local and national government bodies and organisations for reporting cybersecurity incidents. Remember that you can contact INCIBE free of charge and confidentially by dialling 017.
• If you are not sure about a message that appears to have been sent by Santander or you don't recognise a transaction in your account, contact phishing@gruposantander.es immediately

All employees should be aware of how to react in the event of a cyberattack:

• Ransomware.
• CEO fraud.
• Remote access attacks.
• Supply chain attacks.

It is important that they feel comfortable and communicate these types of incident, as this will help to create a security culture.
Encourage the third parties you work with to apply a similar approach. The higher the number of organisations implementing online security practices, the more difficult it will be for cybercriminals to achieve their goals.