An analysis of 100K organizations and their susceptibility to Social Engineering attacks.

1. Hackers Are Exploiting Your
Company’s Weakest Links:
Social Engineering Explained
The Five Most Common Social
Engineering Attack Types
PhishingBaiting
Pretexing Tailgating Quid Pro Quo
The Five Most Common Social
Engineering Attack Types
Phishing Sites Are Primarily
Targeting Technology and
Financial Service Companies
Are Employees Satisfied with
Their Company?
Count of companies with low employee satisfaction scores
by industry
Why Employee Satisfaction
Matters
According to FBI Computer Crime and Security Survey
of organizations that experienced any kind of security
breach suspected a disgruntled employee.
presents
PhishingBaiting
Pretexting Tailgating Quid Pro Quo
The practice of impersonating or
fabricating an identity in order to
obtain sensitive information from a
target.
Includes leaving, or gifting (fabricating a
scenario such as a contest) a physical device
such as a USB flash drive, a digital music
player, or other device infected with malware,
delivering a malicious payload when a target
plugs in the device.
Websites or communications (such as email)
created, mimicking the appearance of official
companies or personnel to steal credentials and
sensitive information from an organization’s
employees.
Includes offering an incentive, such
as prizes or technical support in
exchange for sensitive information.
Tailgating is the physical act of a
malicious actor following a person
with access or credentials to a
private location in order to obtain
sensitive information.
dont.phish.me
Technology Financial Services Information Services
97
98
96
95
94
93
92
91
1 - 10 11 - 50 51 - 200 201 - 500 501 - 1000 1001 - 5000 5000 - 10000 5000 - 10000
Healthcare and
Pharmaceutical
Industries Rank Among
the Lowest in Social
Engineering Scores
Across 18 Industries
Social Engineering Scores Drop As
Companies Get Larger
200
100
300
400
500
600
NumberofPhisingSites
77%
Technology
Information Services
Manufacturing
Financial Services
Retail
= 10 companies with low employee satisfaction scores
To find out your organization’s
social engineering rating, go to
instant.securityscorecard.com
We analyzed data from over 100,000 organizations across 18 industries found
within our SecurityScorecard platform in June and October 2016.
Employee satisfaction scores and phishing site counts are some of the issue
types found within the Social Engineering security factor.
18th
17th
16th
15th
© 2016