Free practice · matching · easy
Practice
Match payment-change signals to controls
Match each business email compromise signal to the control that most directly interrupts it.
Payment-change control path
The requesting message cannot approve or verify its own change
- HoldPause payment and master-data changes
- RecordsCompare approved vendor and transaction facts
- VerifyUse a preexisting trusted contact
- ApproveApply dual-control authorization
- RecordPreserve evidence and the decision
- EscalateReport suspected diversion immediately
Holding the transaction creates time for trusted records, independent contact, separation of duties, evidence, and urgent recovery when funds may be at risk.