Vigilar’s Social Engineering Assessment: Be Proactive

The human factor to information security is your biggest vulnerability. You can have all the right technology in place, installed correctly and optimally running, but if your employees are uneducated or if policies and procedures are not stringent or upheld, your assets are at just as much risk as if you were not running any information security technologies at all. Social Engineering Assessments are a cost-effective way to test your organization and identify weaknesses.

Social Engineering is the process of exploiting weaknesses in personal interaction to gain access to equipment, data, sensitive material, or any other access objective. People, by their very nature, are trusting. This makes for good social interaction amongst trustworthy people, but in business, when a person’s trust is exploited, the company’s data, information, and property may be at risk.

As part of Vigilar’s Social Engineering Assessment Services, clients engage Vigilar to assess their organizations’ security posture through attempts to gain physical access to secured items through employee interaction.

Secured items can include copies of confidential documents, access to internal data networks, and access to physically secured equipment. Prior to the start of the engagement, Vigilar will work with you to identify the key assets of your organization that require the highest level of security, and our consultants will focus on uncovering vulnerabilities that expose those assets.

Deliverables

1. Identification of key assets
2. Detailed report of the assessment findings, including evidence and prioritizing vulnerabilities
3. Comprehensive action plan for remediation
4. Vigilar will work with you to remediate vulnerabilities, which could include:
   • Updating policies and procedures
   • Developing and delivering employee training
   • Implementing new information security technologies

Benefits of Social Engineering Assessments

1. Cost effective assessment of the security awareness of your employees
2. Identify weaknesses using an unbiased third party
3. Proactively address the human factor in your overall security plan