Social Engineering

What Is Social Engineering?

Short definition:
Social engineering is a cyberattack technique that manipulates people into revealing information or taking harmful actions.

What this actually means for a business:
Attackers exploit trust, urgency, or authority to bypass technical security controls by targeting employees directly.

Common misconception:
Only inexperienced employees fall for social engineering. Even trained staff can be fooled by well-crafted attacks.

When this matters:
If your business relies on email, phone communication, or customer service interactions, social engineering is a major risk.

Related terms: Phishing, Pretexting, Cybersecurity Awareness