Question

n a minimum of 100 words, discuss what methods do you believe would be effective in countering social engineering techniques. What information might an employee give out accidentally? How could that employee be taught not to disclose that information? ( Not off the internet original thoughts)

Answer 1

Answer)
Social engineering techniques are the ways and the processes in which the users of a computing system can be manipulated into revealing the confidential information which can be then used to gain unauthorized access to a computer system. This information can then be used by the attackers or hackers to access the restricted access and releasing vital login information among others. There are several methods which can be used to be effective in countering social engineering techniques such as:
a) Countering the familiarity exploit where users must be trained to not substitute familiarity with security measures, and thus the users should have authorization to access certain areas and information.
b) Employees and users must be trained to identify social engineering techniques that fish for sensitive information and reject such requests.
c) Countering phishing techniques and using using encryption and authorization.
d) Countering tailgating and users should not let others use their security clearance to gain access to restricted areas and every user should have their own security clearance for access.
The information which an employee might give out accidentally can be their:
Date of birth
Health information
Names and Addresses
UserNames
etc.
We must train the employees and let them know that any and every information about the users is important and confidential and thus making them aware of the confidentiality and authorization norms should make us aware that employees should not give out that information to any outsiders or even among other users.