This course educates members of the public in the general understanding and some common defense tactics that can be used to mitigate social engineering attacks. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, this course provides students with an understanding of how social engineering attacks can be better mitigated by combining comprehensive security measures with an understanding and awareness of how such attacks can exploit human behaviors. Phishing, spear-phishing, water-holing, ransomware and other types of advanced persistent threats.
Objectives:
- Provide basic knowledge of social engineering attacks and how these attacks can affect organizations or individuals
- Describe reasons why social engineering attacks are effective, and to identify categories of social engineers
- Describe types of social engineering attack techniques and how these various attacks impact individuals and organizations so they can develop strategies to thwart these attacks
- Identify the different types of social engineering tools and the different phases in which they would be used to exploit human trust and online behavior
- Describe preventative measures and strategies for the mitigation of social engineering attacks
Target Audience
This course is for Government and Business IT Professionals whose responsibilities include the regular use of computing devices to connect to and perform official duties, such as responding to incidents and events that occur in cyber or in the physical critical infrastructure within the local government, federal, and private industry. These include, but are not limited to people in the following industries:
- Emergency Management Agency
- Finance & Administration
- Health Care and Emergency Medical Services
- Fire Service
- Public health
- Public Safety Communications
- Human Resources
- Information Technology (IT)
- Risk Management
- Law Enforcement
- Legal