Remote Social Engineering

Annual / Semi-Annual / Quarterly

---

Random social engineering exercises will be performed by CastleGarde that consist of both email and phone panels. Email panels are exercised in an attempt to obtain sensitive information such as usernames, passwords, and other information not publicly available. Phone panel exercises attempt to gather sensitive information by phone. Email and phone panels are conducted based on the credit union’s needs. Scenarios are designed in an attempt to successfully obtain sensitive information without presenting the proper credentials. CastleGarde can perform annual, semi-annual, or quarterly email and phone panels each year contacting approximately 25% of the employees (picked randomly) during each attempt. Deliverables include separate Remote Social Engineering Reports for each time the assessment is performed.