- Core concept: The majority of crime is committed by
insiders.
- Core concept: A common intrusion method is "social
engineering," in which outside persons act like insiders
to gain trust.
- What opportunities exist to determine the trustworthiness
of personnel? What are desirable?
- What options exist for performing a background check?
- What procedures would help to identify employees who might
be a risk?
- Where to draw the line at invasion of privacy
- What types of things can you find out as an employer, employee,
social engineer or otherwise curious person about organizations or
people? Take a look on the Web for organizations that do personnel
background checks; try Pallorium for a quick link.
- Listen to the H2K talk on "Social Engineering" via
the H2K post-conference
site
|