Social Engineering
Social engineering is the leading threat in cybersecurity, and it works on people rather than systems. This course starts from a plain definition and concrete examples, then works through the techniques - phishing, business email compromise, pharming, quid pro quo and malware variants - and how each one gets past traditional defences. It closes on what cyber insurance does and does not do about it.
Recognise the attack that targets your insured's people
Social engineering sits behind a large share of cyber claims, and it rarely looks technical. This course gives you the vocabulary and the pattern recognition to discuss it with an insured, and to see where cover responds and where it does not.
- Define social engineering in plain terms and give concrete examples of how these attacks occur.
- Explain how social engineers exploit human psychology to reach sensitive information.
- Identify the main techniques - quid pro quo, phishing, business email compromise, pharming and malware variants - and tell them apart.
- Describe how the more sophisticated techniques circumvent traditional cyber defences.
- Advise an insured on spotting and mitigating these attacks, and identify where the cyber insurance market is strong and weak on them.
What the course covers
Self-paced, about two hours in total. A final assessment, earns the certificate of completion.
01 What social engineering is
A plain definition and concrete examples of how these attacks actually occur.
02 Exploiting human psychology
How social engineers reach sensitive information by working on people rather than systems.
03 The techniques
Quid pro quo, phishing, business email compromise, pharming and the malware variants - and how to tell them apart.
04 Getting past the defences
The more sophisticated techniques, and how they circumvent traditional cyber defences.
05 Advising an insured
Spotting and mitigating these attacks, and where the cyber insurance market is strong and weak on them.
For anyone advising on a risk that runs through people
No technical background needed. Social engineering targets people rather than systems, and the course stays on the insurance implications throughout.
Brokers and account teams
You need to explain to a client why their people are the exposure, and what cover responds.
Underwriters
You are pricing a risk where most losses begin with someone clicking something.
Claims handlers
You see these losses land and want to recognise the pattern behind them.
About this certificate course
No. Social Engineering is a certificate course, which is shorter than a certification. You earn a certificate of completion, not a certification credential.
There is a final assessment. It confirms you are ready for the certificate of completion.
No. It is a one-off purchase. There is no renewal and no maintenance fee, and your certificate of completion does not expire.
Yes. The course carries 3 CIA CE credits, which count toward the CE requirement at the three-year checkpoint on a CIA certification.
No. Social engineering targets people rather than systems, and the course is written for insurance and risk professionals throughout.
The threat that works on people, not systems
About two hours on the attack behind a large share of cyber claims - and what the market does about it. A certificate course, worth 3 CIA CE credits.