One way to learn how aware your employees are regarding certain information security threats is to perform a simulated social engineering attack. The goal of the simulated attack is to get sensitive information from the employees. One way of a simulated social engineering attack is a simulated phishing attack:
Phishing: A defined group of employees receives an email with the invitation to click on a provided Link or with a document that needs to be processed or read. The goal is to convince the employee to enter a password or other sensitive information. In a simulated attack the results can be analyzed, and specific measures can be implemented.
Did the results of a simulated social engineering attack not meet your expectations? We can offer support to improve the awareness of your employees with an awareness campaign.