Social engineering is a major issue affecting organisational security. Educating employees on#R##N#how to avoid social engineering attacks is important because social engineering tries to#R##N#penetrate an organisation by using employees to grant authorized access to sensitive#R##N#information. While there are a number of theoretical studies about social engineering, a few#R##N#practical studies have moved towards educating and training employees on how to spot such#R##N#attacks. In this research, we emphasise the importance of educating employees to make them#R##N#more resilient to these kinds of attacks.#R##N#We developed an educational video encapsulated within a Social Engineering Training#R##N#Programme. This is essentially an interactive training video during which the learner interacts#R##N#with three different scenarios; educational content, a knowledge-check, and a web page#R##N#containing the latest news about current social engineering attacks.#R##N#The training programme was evaluated in a Saudi trading company with 24 employees. The#R##N#evaluation showed that the programme delivered a positive impact in terms of awareness, as#R##N#tested by a post-training quiz
['Esra Alkhamis', 'Karen Renaud']
The Design and Evaluation of an Interactive Social Engineering Training Programme