Information Security Threat Assessment Using Social Engineering In The Organizational Context: Literature Review

Due to the value and diversity of data that organizations use and produce in their activity, it is extremely important to protect this asset. Security flaws can arise due to several factors and whenever it is difficult to access the de-sired information because of technological barriers. In this case, attacks are redirected to the exploitation of human beings vulnerabilities through various techniques. The objective of this work focuses on literature review, studying the underlying theme of Social Engineering, as it uses human trust, convinc-ing someone of something fake, using various interactions and different vec-tors to gain access to private information. Design Science Research will sup-port the research work due to the possibility of construction, evaluation, and subsequent validation of the artefact. The contribution of a framework pro-posal for preventing social engineering attacks in organizations and providing the best recommendations, guiding, and supporting the stakeholders in the selection and definition of controls that guarantee the security of organiza-tional information and avoid possible attacks by Social Engineering. It is ex-pected that the practical effects of the future work will result in a reduction in the number of attacks using Social Engineering, greater individual and col-lective preparation to deal with this problem and, over time, the incentive to the continued expansion of the adoption of these artefacts at the organiza-tional level.