Cyberwarfare: Information Operations in a Connected World, 2nd Edition

Defending against Social Engineering

Defending an organization against social engineering is of paramount importance. Throughout this chapter, you learned about the havoc that social engineering can cause in your enterprise and discovered the dangers of social engineering attacks. You also learned that technical controls are not always effective against this type of attack because the attack relies on the human ability to circumvent security controls. In this section, you will learn some techniques that may be used to defend against social engineering.

Security Awareness and Education

The primary and most effective defense against social engineering attacks is user education. Users must understand the tools of the social engineer and learn ...