50 likes | 180 Vues
To safeguard organizations, it is crucial to enhance personnel security through effective training and awareness programs. Social engineering poses a significant threat, exploiting the human element, also referred to as 'wetware.' Coercion and deception are common tactics used by con artists. Organizations often report a 100% success rate in social engineering tests. A comprehensive 'top-to-bottom' approach is essential, emphasizing continuous training, responsibility awareness, and regular reminder sessions to minimize vulnerabilities and enhance overall security defenses.
E N D
Personnel Security • Hardware and Software may be upgraded / hardened • ‘Wetware’ is the greatest readily available vulnerability • Personnel may be coerced and / or deceived • encription have 100% success with social engineering tests on a wide range of organisations • ‘Patch’ the person with training
Social Engineers • Con men / women who know how to gain trust • Face to face and electronically [email, SMS, fax, phone, IM etc.] • Theft / loss of equipment • Extremely prevalent, much easier than technical hacking
Defence • ‘Top to Bottom’ approach required • Train • Make aware of responsibilities • Regular reminder sessions
WARP • Warning • Advice • Reporting