Back to Social engineering

To keep a copy, print this page or save it as a PDF from your browser.

Salmini Checklist1 page

Common Risks · Social engineering

Social engineering checklist

Who leads Whoever looks after digital security Name

Use it when

you're agreeing the team rule on checking requests, or a new story is doing the rounds.

The team rule

Requests for money, codes, files or access get checked another way first, whoever they seem to come from. The director included.

Checking another way

Slow it down. Say you’ll call back, then end the conversation.
Contact them a way you already have, never through the message.
Not sure? Ask someone you trust to check for you.
Test a voice: ask something only the two of you know.
Never share a code, PIN or password, whoever asks.

Stories to watch for

A grant, award or trip you never applied for, then a fee.
A colleague, director or reporter with an urgent request or a link.
The bank or tech support asking for a code, remote access or an app.

Notes

Take care: Being conned is embarrassing. Thank whoever reports it, even late, and never blame them.

Started Done Review again