Loading content
Targeted manipulation of people to obtain sensitive information or induce unintended actions.
Social engineering describes targeted manipulation techniques that induce people to disclose sensitive information or perform unintended actions. It relies on psychological tactics, contextual knowledge and trust-building. Effective prevention combines technical controls, organizational policies and regular awareness training and testing to reduce human-targeted risk.
Proportion of employees who click on a test phishing link.
Proportion of employees who report suspicious incidents.
Average time until detection and reporting of an incident.
Attacker used forged sender addresses and form links to steal credentials.
Telephone attacker impersonated an internal colleague and obtained password reset details.
Attacker built a credible profile over weeks and gained employee trust.
Perform gap analysis of current awareness and testing processes.
Define governance, policies and approval workflows.
Plan pilot tests, run them and scale based on results.