Protecting Against Social Engineering
Computer Science: Edexcel IGCSE, topic 5.2.10
Protecting Against Social Engineering
Social engineering is very difficult to protect against. But there are a few tactics employed by organisations to cut down on the amount of successful attacks.
Education and training
- The most effective means of protection against social engineering is education and training.
- People are made aware of the tactics of fraudsters:
- This makes it more likely that they will recognise a fraudulent phone call.
Company security policies
- Company security policies include instructions that employees must follow to uphold security.
- For example:
- Don't discuss a user account without the user having confirmed their PIN number.
Public awareness campaigns
- Banks and governments often run public awareness campaigns to educate members of the public about the risks of social engineering.
- These often include case studies of what could happen if people do not take care.
Test yourself on Protecting Against Social Engineering
How do company security policies help to protect against social engineering?