Social Engineering

A frequent method of breaching password security is "social engineering" - a deliberate attempt by someone to obtain your account information through deception.

To prevent loss of your account information:

• Never reveal your password to anyone. Help Desk personnel, network managers or computer support personnel should never have occasion to need your password to diagnose problems.

• Don't reveal your password over the telephone, via e-mail, etc.

• Make sure that no one is peeking over your shoulder when you type in your password.

Disclosing or discussing sensitive information to unauthorized employees, contractors, vendors, friends and family members, etc., could circumvent the controls that have been put in place to protect that information.