Exploring the factors influencing employee awareness of social engineering threats: A review

Abstract

Phishing is a dynamic threat, making it much more dangerous because a lack of awareness among employees makes it much more difficult for the business to detect and respond to Phishing situations. Social engineering is a process that essentially involves human interactions that can be exploited to the point where typical security methods become defective. The most dangerous risk of social engineering is that the criminals understand human nature and may exploit vulnerabilities without the victims realizing it. This study examines relevant research to determine the factors that may influence employee awareness of social engineering threats. Three demographic factors and seven other factors, according to the literature, may influence employee awareness of social engineering threats.