Skip to content

Anti-Phishing

What is Anti-Phishing?

Technologies, policies, and training programs designed to detect and prevent phishing attacks that attempt to steal credentials or deliver malware through deceptive communications.

Information Security

Frameworks that govern anti-phishing

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on anti-phishing

Requirements naming anti-phishing across 5 standards, quoted from the control text.

RBI Cybersecurity Framework for Banks1 control

The bank subscribes to external anti-phishing and anti-rogue app services to identify and take down phishing websites and rogue apps.

rbi-cybersecurity-framework-for-banks::148 · Para 148: anti-phishing and anti-rogue app takedown services →
PCI DSS 4.03 controls

Security awareness training must address threats and vulnerabilities that could affect cardholder data or sensitive authentication data, covering at minimum phishing (and attacks related to it) plus social engineering.

12.6.3.1 · 12.6.3.1 Awareness training covers phishing and social engineering →
BIMCO Cyber Security1 control

Technical controls should be practical, cost-effective and kept current, drawing on the CIS Critical Security Controls. Covered are: limiting network ports, protocols and services to business need with managed routers;

BIMCO-7.2 · Technical protection measures →
GAMP 5 - Good Automated Manufacturing Practice1 control

Security management comprises the organizational, process and technical measures that keep regulated systems, data and records confidential, intact and available, minimizing internal and external threats: controls against unauthorized or inadvertent access, ro...

gamp-5-good-automated-manufacturing-practice::O11 · Appendix O11 Security Management →
ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Layer 3 Applications per X.805 Clause 7.3: The Applications Security Layer covers what is required of the applications that service provider customers reach over the network.

X805-Layer3-Applications-Security-Email-Web-Directory-File-Transfer-E-Commerce-Video · ITU-T X.805 Security Layer 3 - Applications Security + Email + Web + Directory + File Transfer + E-Commerce + Video Conferencing + IM + Office Collaboration + SaaS + B2B EDI + Mobile Apps + APIs →

Questions people ask about anti-phishing

What is Anti-Phishing?
Technologies, policies, and training programs designed to detect and prevent phishing attacks that attempt to steal credentials or deliver malware through deceptive communications.
Why is Anti-Phishing important for compliance?
Anti-Phishing is a key concept in Information Security. Understanding anti-phishing helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Anti-Phishing?
Anti-Phishing appears in the requirement text of RBI Cybersecurity Framework for Banks, PCI DSS 4.0, BIMCO Cyber Security, GAMP 5 - Good Automated Manufacturing Practice, ITU-T X.805 - Security Architecture for End-to-End Communications. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Anti-Phishing?
Explore our compliance framework pages to see how anti-phishing applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Anti-Phishing applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.