Case studies are illustrations of social engineering in the field. Case study one will begin to prove to you the effectiveness of social engineering and examples on how it can be used. Using what you have learned in the assigned reading.

Case Study: CreditCHEX Case studies are illustrations of social engineering in the field. Case study one will begin to prove to you the effectiveness of social engineering and examples on how it can be used. Using what you have learned in the assigned reading, The Art of Deception: Controlling the Human Element ofecun'fy by Kevin iviitnick - pages 22-26, please explain the pertinent details ofthe case study. In the submissionr describe the 8 components of the Case Study to understand the makeup of a social engineering activity. Case studies will require completing the reading assignment for the week and documenting the following: I Target From whom is the Social Engineertrying to get information? I Analystfhuditorfhttacker Who is the social engineer? I Motivation Why is the social engineer interested in this information? I Goal What information or access is the social engineer trying to obtain? I Pretext What pretext is the social engineer using? I Tactics What tactics are social engineers leveraging in this scenario? I Risk What risks exist to the social engineer? I Ethical Considerations What considerations are there for moral or ethical issues? Is there a conflict or potential conflict? Why or why not? Your case study must be two pages, double spacedr with no title page or reference page. Week 1 Final Report Preview Security Awareness begins at education. It is becoming increasingly important to educate professional employees about personal information security responsibility. In 1'u'y'eek I", you will create a social engineering awareness program to protect ourtarget for our final project. Deliverable Requirements: 1. 3 Security Awareness Emails Compose three monthly security reminder emails intended to circulate through a company to remind people of their security responsibility , focusing on 3 common security concerns. 2. Acceptable Use Policy Create a Security Awareness or Acceptable Use End User Policy to document the security responsibility of employees. 3. Social Engineering Reconnaissance Report Created in Week 6 4. Final PowerPoint Slide Deck Develop a PowerPoint slide deck with LED4i] slides illustrating proper security awareness to fictitious employees including the following: A Common errors {leverage case study material) A Defenses 5. video presentation I Narration ofthe PowerPoint Record a video of your presentation ofthe PowerPoint slide deck illustrating proper security awareness to fictitious employees. All five components will be submitted in WeekTand evaluated via the Final Report Rubric. Answer the following questions: LWhat state should a target he in to maximize social engineering successJ (Alpha or Beta mode) and why? 2.What is Social Engineering? 3.What is SMiShing and why is it so dangerous? 4.What is Vishing and list one of the reasons it is chosen by an attacker? 5.The most talked about topic in the world of Social Engineering is: 6.What is OSINT? ?.List 3 questions to ask when targeting an organization B.List 3 questions to ask when targeting an individual 9.What are some reasons to know Entry and Exit points? [list two) 1D.Match the Social Engineering Pyra mid level with the corresponding engagement step 4 5 Group of answer choices [ Choose ] Attack Plan Pretext Development Reporting OSINT/Intel Attack Launch 2 [ Choose ] Attack Plan Pretext Development Reporting OSINT/Intel Attack Launch 3 [Choose ] Attack Plan Pretext Development Reporting OSINT/Intel Attack Launch 4 [ Choose ] Attack Plan Pretext Development Reporting OSINT/Intel Attack Launch 5 [ Choose ] Attack Plan Pretext Development Reporting OSINT/Intel Attack LaunchAteam of 4to 5 individuals may choose to evaluate a large Canadian organization and rdevelop a strategic analysis of its organizational culture'. The group may choose an organization with strong Canadian roots such as one ofthe 5 big banks (REC, CIBC, TD, Scotia, BMO}, 3 big telcos [Telus, Bell, Rogers] or some other organizations such as Tim Hortons, Canadian Tire or BlackBerry. In your original work, I encourage you to focus specifically on developing an understanding about why the organization ha the culture they have and how does it impact their employees, partners, and customers. The project could {but need not} involve an existing or a new transformation project that your group member's organization is involved in, or it may be a project from the past, but please ensure early on that you have adequate access to information for your project. For the purposes of this project assignment therefore, a small, manageable aspect! project! case is clearly better than a large, illdefined business case. If you have specific questions about the suitability ofa project topic or organization please contact me. We will have an inclass section where I will explain in detail different ways you can go about this project. You will use topics and exercises done in class to develop your understanding about organizational culture including but not limited to; E Company introduction E Organizational structure E Organizational culture E Organizational culture alignment with organizational strategy E Leadership style and impact on organizational culture E Select current or past issues related to company's culture E The advantages and disadvantages oftheir current organizational culture E Recommendations to improve current organizational culture PROPOSL Please submit a half-page description of your choice of Canadian company and HR actiyities by June 30, 2323 during liye class,i or yia email. Also, please indicate which team member will be the rpoint of contact' with me. Please describe the next steps planned; any difficulties you expect, and questions you haye of me. I will respond with any questions orconcerns that you haye, respond, and let you know if you haye the green light. Yourfinal group report and presentation is due on the date indicated on your course syllabus, posted on schoology. As part ofthis lGroup Assignment Project, I expect E A written report B {5U% ofthe project grade); Between 8 to 12 pages [1U page is ideal}, singlespaced, font rial, size 11. The pages include any exhibits or pictures that you may share but excludes coyer letter the coyer should include project headline, group member names and Hills, date etc. You may use Word, PowerPoint, Excel or anything else, but please PDF it. Please email your report to me with your Group details in the subject of the email as | haye explained in class. I must receiye your email before the submission date for the report as mentioned on your course syllabus posted on schoology. any late submissions will haye deductions as policy and will affect the oyerall grades of all group members. Each group member will receive the same grade unless all the other group members inform me that one or more members ofthe team have not contributed a reasonably proportionate share of the work. In such a case, I will inyestigate to determine what grade distribution is appropriate. If there are problems with the team, please notify me as soon as possible in the hope that we can deal with them before then end of the semester. E A PowerPoint presentation [25% of the project grade]; The PowerPoint presentation consisting of no more than 5 slides must be submitted with written report submission. The Groups will be presenting their assignment in class on the Group assignment presentation dates as posted on the course syllabus, posted on schoology. Each group will have no more than 3" minutes to present their report to the class. Each group member ofthe team is expected to be professionally dressed {business formal} forthe presentations and must participate in presenting their section of the assignment. E Strategy defense {25% of the project grad e}; The groups must be prepared to answer questions and defend their strategyrr point of View. I will be asking prepared questions, releyant to your assignment, and may direct the questions to the whole group or one indiyidualr about their specific section. I expect indiyiduals to have sound knowledge of their own work and that of the otherteam members ofthe group. The oars should not take more than 5 T minutes depending on the report and presentation