Glossary · Information security
Social Engineering
Manipulating people into revealing information or taking actions that compromise security, rather than attacking technology directly.
Put the term into practice: ISMS software
Social engineering exploits human psychology, trust, urgency, authority, or fear, to trick people into bypassing security. Phishing is the most common form, but it also includes pretexting, baiting, and impersonation over phone or in person.
Because it targets people rather than systems, defence relies on awareness, clear verification procedures for sensitive requests, and a culture where reporting suspicious approaches is encouraged.
