Question 7targets high-value individuals such as senior executives in an attempt to steal sensitive…

➤ Can technical controls and training prevent whaling attacks?
Yes. Combine technical controls and training for best protection. Deploy SPF, DKIM, and DMARC, advanced email filtering, anti‑spoofing, and multi‑factor authentication. Use least‑privilege access, payment verification procedures, and incident response playbooks. Regular security awareness training and realistic phishing simulations help executives recognize and report social engineering attempts.