Advice to IT Professionals on Social Engineering
IT professionals are accustomed to thinking about the technical aspects of security.
However, as this report has shown, the human element—the techniques that attackers use to trick typical users into helping them—has become just as important for attackers as the technical element, if not more so. By implementing effective technical safeguards, programs, and processes designed to defend against social engineering, you can help your users avoid being taken advantage of by attackers.
You can even enlist them as some of your most valuable assets in the fight against security threats.