Social engineering and verifying who you're dealing with

Skills you'll practise

• Name the common manipulation tactics.
• Verify requests using contact details you already have.
• Say no politely to requests that skip procedure.
• Report attempts even when nothing happened.

Course outline

1. 1.Social engineering and verifying who you're dealing withVideo · 3 min
2. 2.Authority, urgency, friendliness and fearLesson · 8 min
3. 3.Pretexting and phone-based attacksLesson · 8 min
4. 4.Social engineering in remote and hybrid workLesson · 8 min
5. 5.Social engineering and verifying who you're dealing with: knowledge checkKnowledge check · 18 questions
6. 6.Urgent password reset from an unverified callerScenario
7. 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• CISA: Avoiding Social Engineering and Phishing Attacks
• NIST SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management