Social Engineering Exercises
Customized email, voice, text, social media and collaboration-based scenarios that test realistic human and process weaknesses.
Know when to bring this work into the program.
Use customized social engineering when standard phishing campaigns do not test the people, channels or business processes most likely to be targeted.
A scope built around the risk.
Customized email, voice, text, social media and collaboration-based scenarios that test realistic human and process weaknesses.
- Email, voice, text, social media and collaboration channels
- Executive, finance, HR and vendor pretexts
- Identity verification and payment-change processes
- Escalation, reporting and real-time response
Useful output for the people who must act.
- Scenario design and documented authorization
- Campaign results by channel and behavior
- Process and awareness findings
- Targeted coaching and control recommendations
A process designed for social engineering exercises.
Design the pretexts
Begin with email, voice, text, social media and collaboration channels and confirm the systems, people and evidence needed to answer the client’s specific questions.
Execute across channels
Review executive, finance, HR and vendor pretexts. Then evaluate identity verification and payment-change processes to determine whether the relevant controls operate as intended.
Measure behavior
Assess escalation, reporting and real-time response and connect the result to credible security, operational and business impact.
Coach and strengthen
Provide scenario design and documented authorization and campaign results by channel and behavior, then align responsible parties around the next actions.
Move from activity to clarity.
Will employees verify a trusted-looking request?
To answer this, Elteni analyzes email, voice, text, social media and collaboration channels together with executive, finance, HR and vendor pretexts. The client receives scenario design and documented authorization, with the evidence, context and next steps needed to act.
Can an attacker move from one channel to another?
To answer this, Elteni analyzes executive, finance, HR and vendor pretexts together with identity verification and payment-change processes. The client receives campaign results by channel and behavior, with the evidence, context and next steps needed to act.
Are suspicious interactions reported quickly?
To answer this, Elteni analyzes identity verification and payment-change processes together with escalation, reporting and real-time response. The client receives process and awareness findings, with the evidence, context and next steps needed to act.
The result does not have to live in another report.
Relevant findings, evidence, owners and remediation status can be centralized in the Elteni Platform as part of an ongoing relationship.
Explore the Elteni Platform →