|
Are your employees susceptible to outside influences?
Social Engineering is a method that outside sources use to invade your
secure systems by building inappropriate trust relationships with insiders,
such as unsuspecting employees. In this way, these shrewd intruders
can acquire sensitive information or inappropriate assess privileges
to confidential information, such as organizational charts, phone numbers,
procedures, or passwords. Strengthening your security by locating potential
weaknesses.
Venture's Social Engineering service allows you to assess the security
awareness of your employees and identify procedural weaknesses. Our
assessment can identify specific problem areas that might be addressed
by additional employee training or topics for procedure development,
allowing you to tar-get such programs more efficiently. More importantly,
our Social Engineering service can help assess and improve employee
security awareness and their handling of proprietary information in
daily business operations. Beating your enemies at their own game.
To evaluate your organization's vulnerability to social engineering attacks,
Venture and its skilled security-professional partners attempt to gather this
information using the same conventional and unconventional methods employed
by recruiters, hackers, or industrial spies.
Our security professionals then attempt to gain further access into your organization
as a means of assessing additional security problems. These methods include
telephoning into the organization and posing as an insider. Generally performed
from a remote site, this information-gathering process high-lights potential
deficiencies in operating procedures, employee awareness, and corporate policy
related to the handling of corporate confidential information by employees and
other insiders. Verified results you can count on, and act
on.
We produce a written report, including an evaluation of any procedural
flaws and associated risks. In addition, we recommend enhancements to
corporate policy procedures and security awareness training. We deliver
the report in bound hard copy and in electronic form on diskette in
Microsoft Word™-compatible format. As an option, we can include our
findings as part of an on-site Executive Briefing.
|