Whaling
What is Whaling?
A highly targeted phishing attack aimed at senior executives or other high-profile individuals within an organisation. Whaling attacks are carefully crafted to appear as legitimate business communications.
Frameworks that govern whaling
What the standards actually require on whaling
Requirements naming whaling across this standard, quoted from the control text.
The CCMP addresses detection, containment, response and recovery; the bank takes measures to prevent attacks and detect intrusions promptly, prepares for zero-day, remote access and targeted attacks, and addresses threats including denial of service and DDoS,...
rbi-cybersecurity-framework-for-banks::193 · Para 193: CCMP covers detection, containment, response and recovery for a wide threat set →Questions people ask about whaling
What is Whaling?
A highly targeted phishing attack aimed at senior executives or other high-profile individuals within an organisation. Whaling attacks are carefully crafted to appear as legitimate business communications.
Why is Whaling important for compliance?
Whaling is a key concept in Information Security. Understanding whaling helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Whaling?
Whaling appears in the requirement text of RBI Cybersecurity Framework for Banks. Across these standards we have identified 1 control that names it directly, each linked to the control text on the compliance platform.
Where can I learn more about Whaling?
Explore our compliance framework pages to see how whaling applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.
See how Whaling applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.
Written and maintained by Gerard Blokdyk, The Art of Service.