Cybersecurity Awareness: Social Engineering (2019)
1h 6mIntermediate2019-12-20
Authors

Stephanie Ihezukwu
Information Security Analyst
Course details
Social engineering is one of the most dangerous forms of hacking because it preys on human nature. Learn how to defend your organization from social engineering by recognizing and thwarting the most common types of attacks. This course provides security teams and professionals with information on common social engineering techniques and safeguards. Instructor Stephanie Ihezukwu—a security analyst and engineer—describes how phishing, vishing, baiting, and physical activities like tailgating all provide entry to bad actors, and explains how training can be the most effective tool to combat these attacks. She also explains how to create policies and procedures; set up controls around passwords, email, and software updates; and conduct tests to see how effective your defenses truly are.
Learning objectives
Social engineering techniques
Phishing and vishing
Baiting
Tailgating and shoulder surfing
Providing cybersecurity awareness training
Managing passwords
Creating policies and procedures
Testing your defenses
Elements of an effective training program
Learning objectives
Social engineering techniques
Phishing and vishing
Baiting
Tailgating and shoulder surfing
Providing cybersecurity awareness training
Managing passwords
Creating policies and procedures
Testing your defenses
Elements of an effective training program
Skills covered
Security AwarenessNetwork SecurityCybersecurityDeep Dive (X:Y)
Concepts
Introduction
- Defeat social engineers
- What is social engineering
Social Engineering Techniques
- Influence and decision-making
- Phishing
- Pretexting
- Spear phishing and whaling
- Vishing
- Baiting
- Tailgating and shoulder surfing
Safegarding Your Company from Attacks
- Cybersecurity awareness training
- Properly manage passwords
- Install patches
- Spam filter
- Sandboxing
- Scan your attachments
- Anti social engineering software
- Create policies and procedures
Testing Your Defenses
- Phishing simulations
- Penetration test
- Physical penetration test
- Social engineering penetration test
Cybersecurity Awareness Programs
- Training videos
- Posters and flyers
- Education on personal data security
Conclusion
- Next steps