Social Engineering

Social engineering is a type of attack where scammers trick people into giving them access to sensitive information. In today’s ever-changing world, it is important to be familiar with all the social engineering techniques and the counter-measures available to reduce the risks. 

Adam Hall, Senior Security Consultant - Cyber, Risk and Advisory

Socially engineered attacks are aimed at people, not technology. We help building awareness around social engineering in your organization. We have significant experience performing social engineering exercises across a broad range of organizations. Before an engagement is undertaken our consultants work with you to determine the requirements, objectives, and scope to strengthen your information security awareness posture.

With our partner Proofpoint’s interactive training modules, your employees will learn how to recognize and avoid common social engineering techniques and keep your people, areas, and assets secure. This solution offers a variety of customizable security awareness materials, including posters, images, and articles, all designed to make cybersecurity an ongoing topic of conversation with your end users. 

Our Social Engineering Assessments are a mix of passive reconnaissance and active social engineering techniques. We use publicly available methods to research potential weak points as agreed in the terms of reference with your organization. We then design and perform social attacks or other deceptive techniques to gain access to controlled systems and/or environments. 

Passive reconnaissance is used to passively gather information about your organization's employees, technologies and data. Depending on the scope of the engagement, the simulation will typically focus on key staff such as directors and board members, senior management, key IT staff and systems and sensitive data. The simulations will demonstrate if an attacker could perform a successful social engineering attack against your organization