WEEK 05
Social Engineering & Human Behavior
Operational scenario
Finance received an 'urgent CEO wire request' and a stranger followed staff through the badge door. Design the defense for a fictional company.
Week completion
0%
~10 hours this week
Assessment: Knowledge check 5; SE scenario rubric
Deliverable: Awareness campaign plan
Learning objectives
- Identify SE techniques
- Run an authorized, ethical awareness exercise
Classroom topics
- Phishing / spear / whaling
- Vishing / smishing
- Pretexting, tailgating, baiting
- BEC
- Deepfakes
- Influence principles
Standards · vocabulary
NIST CSF (Protect — Awareness)ISO 27002
BECOSINTHUMINTVishingSmishing
Open glossaryCompetency demonstrated: Recognizes and defends against social engineering.
Four-mode learning matrix
~1.5 h
Physical hands-on lab
Badge / tailgating tabletop drill in a controlled space.
~2 h
Docker container lab
Lab 6 — Capture & analyze simulated phishing traffic.
~0.5 h
AR/VR immersive scenario
Recognize tailgating / unauthorized access; SE awareness scenario. Role: Social-engineering defense coordinator.
No headset? Desktop SE scenario + checklist. Printed and mobile versions are also available.
Individual technical assignment
Build a phishing-resistant controls checklist.
Team exercise
Design an authorized awareness campaign for a fictional company.
Required hardware
- Lockable cabinet
- Dummy badges
- Safe USB devices
Required software
- Docker
- Wireshark
- Email header analyzer
Workplace application
Most breaches involve a human element; awareness programs are a line item in every security budget.
Docker progression step
L6 Capturing and analyzing simulated traffic
Open the Docker rangeCapture on sensor while a simulated phishing click occurs; annotate the PCAP.
Lab evidence to collect
Safety controls — confirm before starting
Controls practiced this week
Email & web / social-engineering defensePhysical & environmental security
See the full crosswalkReflection & rubric for week 5 Modes tracked: 0/5