Hello Everyone, Social engineering as we have read up on this week and have probably seen a few times throughout our learning journey. Social engineering is a way for an attacker to get someone to divulge important information or perform certain actions. These attacks can be phishing which uses text or email, baiting in which piques greed or curiosity, scareware which is scaring someone into these actions, or vishing amongst other things. Now, when it comes to assessing the effectiveness of the SE policy and training that has been performed. There must be assessments to find out if these areas are working and if not what can be done to improve and the assessment will need to be organized by senior experts in the field within the organization. The assessment can be held internal or a contracting organization can perform it also, necessary individuals will need to know of the assessment (higher leadership, police, ect.). "A successful assessment will identify lapses and weaknesses involving human employees. The knowledge of these mistakes will be useful in planning for improvements" (RSISecurity, 2020). This will give the overall organization an understanding of where they sit with their SE posture. It will also state