Social Engineering Test

The need for the implementation of a Social Engineering Test is becoming more and more critical. There are seemingly limitless scams and threats spreading faster and faster each day. Fraudsters are incredibly knowledgeable and have the resources to easily penetrate and infiltrate systems with thefts, breaches, and more. They will lie convincingly and successfully cheat and steal their way past your organization's security controls, most likely with little trouble, if you do not have the proper security in place.

Fraud incidents are on the rise - especially in financial services and healthcare - and many of these crimes result from social engineers achieving deception in person, via the telephone, and/or through popular social networking sites. Despite all the media hype about the threats from hackers and viruses, the greatest threats to an organization's information security are actually the employees of the company!

In a social engineering test, our information security professionals pose as an attacker using their social skills to obtain or compromise information about the organization who hired us. An actual attacker may seem unassuming and respectable, possibly claiming to be a new employee, repair person, or researcher and even offering credentials to support that identity. Our security professionals use real-world tactics like these in their social engineering test. Well-trained victims of social engineering test attacks; however, will ask questions in order to thwart the attempts of an attacker. They know that by giving too much information, the attacker may be able to piece together enough information to infiltrate an organization's network.

mplementing a regular social engineering test into your security plan will drastically increase your security posture and gives you peace of mind knowing your employees know how to spot and stop a scam. InfoSight can provide your organization with the assistance you need for effective breach prevention. A social engineering test is always a good place to start when assessing your security posture. InfoSight can also assist with the security awareness training and education.

Here are some questions to ask to determine how vulnerable your network may be:

• How long ago was my last vulnerability test?
• How many changes and or upgrades has my network had since my last vulnerability test?
• Do the counter measures I have in place to prevent an intrusion actually work?
• What security layers should I implement next to best protect my company's assets?
• Do I know where confidential and sensitive data is located on my network enterprise wide?
• How do I know if my IT Security reports are accurate?