+AT-02(03) [H] Social Engineering and Mining

AT-02(03) [H] Social Engineering and Mining

Control

Provide literacy training on recognizing and reporting potential and actual instances of social engineering and social mining.

Discussion

Social engineering is an attempt to trick an individual into revealing information or taking an action that can be used to breach, compromise, or otherwise adversely impact a system. Social engineering includes phishing, pretexting, impersonation, baiting, quid pro quo, thread-jacking, social media exploitation, and tailgating. Social mining is an attempt to gather information about the organization that may be used to support future attacks. Literacy training includes information on how to communicate the concerns of employees and management regarding potential and actual instances of social engineering and data mining through organizational channels based on established policies and procedures.

Assessment Objective

  1. literacy training on recognizing potential and actual instances of social engineering is provided;
  2. literacy training on reporting potential and actual instances of social engineering is provided;
  3. literacy training on recognizing potential and actual instances of social mining is provided;
  4. literacy training on reporting potential and actual instances of social mining is provided.

Assessment Method

Examine

System security plan privacy plan literacy training and awareness policy procedures addressing literacy training and awareness implementation literacy training and awareness curriculum literacy training and awareness materials other relevant documents or records

Interview

Organizational personnel who receive literacy training and awareness organizational personnel with responsibilities for literacy training and awareness organizational personnel with information security and privacy responsibilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by AT-02(03) [H] Social Engineering and Mining – Assessment Procedure
is blocked by Social Engineering & Mining