0333 358 3808
Home › Social engineering

Social engineering training

Attackers often skip the technology and target people directly. Social engineering training teaches staff to slow down and verify.

Call 0333 358 3808Make an enquiry

Common social engineering techniques

  • Vishing: phone calls pretending to be IT support, the bank or a senior manager
  • Smishing: text messages with delivery, tax or account alerts
  • Pretexting: a believable story used to extract information or access
  • Impersonation and business email compromise: fake requests from executives or suppliers
  • Tailgating: following someone through a secure door
  • Help desk manipulation: persuading support staff to reset passwords or MFA

The verification habit

The single most useful defence is independent verification: call back on a known number, confirm payment changes through a second channel, and never approve an MFA prompt you did not start. Tools such as Cisco Duo with number matching make MFA fatigue attacks harder.

Policy plus practice

Training works best alongside simple written procedures for payments, password resets and visitor access, so staff have permission to say no. Learn more in security awareness training for employees.

How Forever Systems runs your training programme

We are vendor-agnostic. We will recommend the platform that suits your size, sector and budget, then run it for you so it actually happens month after month.

  • Baseline phishing test to measure where you start
  • Platform selection and set-up, with single sign-on and automatic user sync where available
  • A year-round schedule of short modules and simulated phishing campaigns
  • Reporting for the board, insurers and auditors, showing completion and click-rate trends
  • Joined-up defences: email security, MFA and endpoint protection so training is backed by technology

Forever Systems Ltd provides IT and cyber security services to UK organisations.

Want a baseline phishing test for your team?

Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.

Call 0333 358 3808Send an enquiry

Frequently asked questions

Is social engineering covered by phishing training?

Partly. Phishing is one form of social engineering, but phone, SMS, in-person and help desk attacks deserve their own attention.

Can you test staff with phone-based social engineering?

Some programmes include vishing simulations. We can advise on whether it is appropriate for your organisation.

More security awareness topics

HomeOverview of awareness training and how we run it.Cyber security awarenessThe fundamentals every employee needs.Training for employeesRole-based training and new-starter induction.Phishing simulationRealistic simulated phishing campaigns.Phishing awarenessTeach staff to spot and report phishing.GDPR trainingData protection awareness for staff.Small businessAffordable, low-admin training for small teams.Information securityFor regulated and ISO 27001 environments.Training softwareHow to choose a training platform.