Exam CISM topic 1 question 650 discussion

Social Engg. attackes are not only through E-mails

social engineering, does not not necessarily mean phishing

C. Perform a business risk assessment of the email filtering system. The best way to identify the risk associated with a social engineering attack is to perform a business risk assessment of the email filtering system. Social engineering attacks often target email systems as a means to trick users into disclosing sensitive information or performing actions that compromise security. By assessing the effectiveness of the email filtering system and its ability to detect and prevent social engineering attacks, organizations can identify potential risks and implement appropriate mitigation measures. Options A, B, and D may provide valuable insights into security measures but are not specifically focused on identifying the risk associated with social engineering attacks.

Conducting regular security awareness training and testing can help organizations gauge their employees' susceptibility to social engineering attacks and provide an opportunity to reinforce best practices and correct any weaknesses in their security posture. Monitoring IDS, reviewing SSO authentication logs, and performing business risk assessments are important components of overall security, but they may not directly assess user susceptibility to social engineering, which is the primary concern in this context.

D. test user knowledge of information security practices.

C should be the answer