Social engineering is one of the biggest threats to cyber security. It exploits the vulnerabilities in human behaviour to gain access or retrieve information. Social engineering is the manipulation of humans to obtain unauthorized access to information or information systems.

Technical security measures do not help in countering social engineering. No matter how much an organisation invests in security tools, products and professionals, if the human factor is compromised, then all other security measures are useless. A different set of tools, training, procedures and policies are required to protect from social engineering cyber-threats.

For this Discussion, you examine the possible social engineering threats to your organisation and advise on proactive plans to reduce the possibility of such attacks.

Briefly describe your work environment or another one that you are familiar with.

Describe at least two possible social engineering types of attacks that may threaten your work environment.

Analyse the potential damage of these attacks if they occurred.

Analyse the possible causes of these attacks and recommend a plan for avoiding their occurrence.