Typical severity: Low. Likelihood of attack: High. An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.
An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks. | Individuals should avoid complying with suspicious requests.