Social Engineering

What is Social Engineering?

Social engineering exploits human behavior through phishing, impersonation, pretexting, or deceptive communication. It bypasses technical defenses by targeting people. In TPRM, vendor employees are frequent targets because of their access to systems and data.

FAQs

Are social engineering attacks preventable?

Training reduces risk but cannot eliminate it.

Do attackers impersonate vendors?

Yes, vendor impersonation is common in BEC attacks.

Should vendors undergo training?

Yes, it is essential.