Typical severity: Low. Likelihood of attack: High. The adversary uses social engineering to exploit the target's perception of the relationship between the adversary and themselves. This goal is to persuade the target to unknowingly perform an action or divulge information that is advantageous to the adversary.
An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.