Social engineering.
Telegram channel: https://t.me/protectioninformation
Telegram Group: https://t.me/informationprotection1
Website: https://legascom.ru
Email: online@legascom.ru
Earlier, I tried to justify the very need for remote network analysis for system administrators. Knowing the methods of intruders makes it easier to defend against them. However, when talking about information security, for some reason, everyone immediately remembers about antiviruses, firewalls and other technical means. But people who work for the company are often overlooked. But a hacker can get a lot of useful information from communication with company employees and from open sources, without resorting to malware and other technical means. By the way, vulnerabilities related to the human factor cannot be detected using vulnerability scanners.
Of course, working with personnel is, first of all, the task of the HR department (HR department). The HR Department employs an employee, signs relevant documents, and familiarizes them with various rules, policies, and regulations. However, employees of IT departments. and information security should also be involved in this process. The company should develop an information security policy.
