|
World Class
Social Engineering Audit
Social engineering is a collection of
techniques used to manipulate people into
performing actions or divulging confidential
information. In many instances unauthorized
individuals use social engineering to gather
information such as an id and password from
the victim.
Altius IT’s social engineering audit uses fake e-mails (phishing) and
false web sites to evaluate and test the
effectiveness of your employee security
education and awareness training. Our report
identifies specific vulnerabilities and
provides detailed recommendations to
mitigate risks due to social engineering
attacks.
Phishing
Attacks and Other Techniques
Social engineering attacks rely on manipulating people
rather than exploiting technical vulnerabilities, so the
audit tests the techniques an attacker would actually use
against your staff:
- Phishing attacks - fraudulent e-mails that appear to
come from a trusted source, written to persuade the
recipient to disclose login credentials, bank details, or
other sensitive information
- Spear phishing - the same approach aimed at named
individuals, using details about their role and
colleagues to make the message convincing
- Business email compromise, also called CEO fraud -
impersonating an executive to have funds transferred or
confidential information sent out
- Pretext calls - telephone contact under an invented
scenario, commonly IT support or a security guard, to
obtain access or information
- False web sites - convincing copies of pages your
staff already trust, used to capture credentials
Phishing is the most common of these and the usual first
step in a ransomware incident, which is why the results of
this audit feed directly into your
ransomware recovery
readiness and your security awareness training.
Social Engineering Audit Report
Altius IT's reports provide specific
recommendations and detailed steps you can
take to address social engineering security
vulnerabilities. After delivery of our
reports, Altius IT provides three months
of free support to answer any questions
you may have. This ensures your social
engineering security
vulnerabilities are properly mitigated or
eliminated.
Audit Team
Altius IT's audit team includes seasoned and experienced professionals with each engagement:
- Certified Information Systems Auditor
- Experienced Project Manager
- Senior Security Engineer
Proposal
Our proposal provides you with detailed
information so you know exactly how we will
help you:
- Project scope and tasks
- Pricing options
- CV's of our audit and security team
members
- Sample reports you will receive
- Why Altius IT
Client Experience
Altius IT works with a diverse number of
clients across a wide range of industries.
We help organizations of all sizes, from the
smallest mom and pop start-up to the world's
largest and most recognized names. Our
case
studies show how we have helped
organizations identify, manage, and reduce their
risks.
|