Definition
Social Engineering is a set of psychological manipulation techniques used to persuade people to disclose information, perform particular actions or bypass established safeguards.
Human Explanation
Instead of attacking a computer system directly, an attacker attempts to exploit a person's trust, emotions, habits or limited attention.
Why it Matters
People take part in security decisions throughout an organisation, which allows attackers to target interactions that technical controls alone may not fully protect.
Conceptual Boundary
Social Engineering is not limited to digital techniques. Its defining feature is influence over human behaviour, whether communication occurs online, by telephone or in person.
Practical Perspective
Effective protection combines usable procedures, appropriate technical controls, verification habits and users who can pause and report suspicious requests.