A security awareness training officer is designing a module on AI-enabled social engineering for non-technical staff. She wants to focus on the most effective behavioral change rather than technical detection.
What is the single most important behavioral change to teach employees about defending against AI-generated deepfake and voice clone attacks?
- A.A. Teach employees to look for visual artifacts like blurry hairlines and unnatural blinking to detect deepfakes in real time.
- B.B. Teach employees that any request for a high-value or sensitive action (financial transfers, credential sharing, access grants) received through any communication channel must be independently verified through a pre-established, out-of-band trusted contact method - verification is triggered by the action requested, not by skepticism about the requester's identity.
- C.C. Teach employees to ask callers a security question whose answer only the real person would know.
- D.D. Teach employees to record and analyze all video calls for deepfake patterns using a third-party tool.