“Phishing” occurs when an employee receives a false email that appears genuine, exposing the organisation...

Phishing is a form of fraud, where deception is used to gain financial advantage or access to sensitive data. It is not corruption (misuse of power), bribery (offering inducements), or a human rights issue. Procurement professionals must be alert to fraud risks in supply chains, including cyber-enabled risks such as phishing and invoice fraud. Responsible sourcing extends to protecting organisational data and finances against such attacks, often through robust controls, training, and supplier verification procedures.