Social Engineering

Before the start our assignment, we closely work with the client to agree with specific and measurable test objectives. The test objectives are tailored to test-specific policies and processes within your organization. This is an excellent way for you to test the effectiveness of your security awareness training program, or to lay the foundation for creating an awareness program.

The first and most rehearsed aspect of social engineering is information gathering; this provides us with information with which to convince your unsuspecting employees into believing or even assisting with the attack. We use different resources to gather information: corporate website, public search databases, jobsites, dumpster diving, public venues and physical access. Then, depending on your test objectives, we will use a range of techniques including persuasion, spear fishing by means of Phone Calls to individuals within organization, specifically crafted emails, Physical media such as USB Drives, etc. Once we have gained entry onsite we are free to operate as you require us to.

• A detailed report about the policies that were tested and the result of each attempt.
• Our approach is through knowledge share and understanding so that you can improve your future security posture by raising security awareness amongst your staff.

• Our team has extensive expertise in conducting social engineering exercises from small to medium and large enterprises… be it brick and mortar or credit card processing, we have worked through all of them.
• Our testing methodologies and the skills of our team have been developed and continually improved over the course of thousands of client projects. This enables us to help you stay one step ahead in ensuring that your systems and infrastructure are secure.
• Key benefits such as
• Empanelled with Government of Maharashtra, CERT-India and NASSCOM.
• ISO 27001 Certified Company.
• CEH, CISSP, eCPPT, OSCP certified professionals.