Course Catalogue.

After participating in this course, you will be able to:

• Explain and understand what social engineering is, the evolution of social engineering techniques, the motives of criminals using social engineering tactics, and the current most commonly used types of social engineering tactics
• Name some real-life social engineering exploits currently being widely used by cybercriminals (use of AI, imposters, spoofing, malicious websites, and more) for which other engineers and technical professionals have been victims
• Determine the types of harms that social engineering exploits have on the associated business, individuals who fell for the tactics, and the people associated with the personal data that was breached
• Create protections to help individuals identify social engineering attempts, and steps to take to prevent the organization, and the individuals themselves, from falling victim to social engineering attacks, and key actions for investigating phishing and other types of social engineering attacks
• Implement a variety of approaches to create awareness and training programs within your organization to protect against social engineering attacks, including considerations for choosing whether or not to use phishing campaigns to test your organization
• Have access to additional resources to use to maintain ongoing privacy, security, and associated safety protections

Description
Engineers and all types of technical professionals have their professional and personal information exposed and targeted by criminals through their physical and digital footprints. These criminals target such professionals via snail mail, telephone, legal documents including bank checks, email, texting, online chats, social media sites, and more. They are all potential targets and are at risk for falling victim to social engineering attacks, such as phishing, identity spoofing, bogus websites, and more. All organizations have been targeted. Not only are new social engineering tactics emerging, but all the old tactics are also increasing in frequency.

To strengthen your resilience of your organization, systems and facilities against social engineering, engineering and technical professionals need to understand the wide and growing range of social engineering attacks. In this two-day course, Rebecca Herold, a world-renown practitioner, expert in and professor of information and technology security and privacy, describes how cybercriminals use a variety of social engineering tactics in general, and in particular within the chemical, civil, electrical, environmental, industrial, mechanical, municipal and general technical professions and industries.

Examples of the concepts are provided, along with descriptions and advice for planning how to address the risks and the next steps to take practical and effective actions to mitigate the risks. Real-life use cases of cybersecurity and privacy incidents will be reviewed, ethical considerations for preventing and responding to social engineering attacks and explanations of the types of actions that could have been taken to prevent the incidents will be discussed. Multiple use cases will be analyzed, with student participation. Participants will leave the course with an understanding of how to identify and defend against a social engineering attack.

Who Should Attend
Practitioners that depend upon, or have within their work environment, technologies, including but not limited to:

• Technical personnel
• Facility managers
• IT managers
• Sourcing/Contracting managers
• Design engineers
• Facility engineers
• Electric grid engineers
• Construction engineers
• Product development engineers
• Software engineers and architects
• IT engineers and architects
• Engineering consultants
• Transportation engineers
• Material managers
• Facility operators
• Environmental scientists
• Lawyers
• Cybersecurity managers
• Privacy managers