Social engineering is a method used to gain unauthorised access to information or IT systems by eavesdropping on employees. It can be used to manipulate employees into performing unauthorised tasks. Employees of outsourcing service providers may be a particularly worthwhile target in this regard because they have access to a wealth of data from different organisations.