The category that covers phishing, QRishing, smishing, vishing, USB Drop and deepfake. The platform natively covers the first two; the rest run as a service.
HRM glossary
Social engineering
Manipulating a person, not a system, to get an action or a piece of data.
What is Social engineering?
Cybersecurity — Cybersecurity is the ongoing management of cyber risk to understand it and reduce it.
Human Risk Management (HRM) — Managing cyber risk with a focus on people's behavior, not on completing a course.
Security awareness training — The category already installed: training people in cybersecurity. HRM is what comes next.
Phishing — NIST defines phishing as deceptive messages that trick people into clicking malicious links or downloading software.
HRM glossary
Questions about Social engineering
What is Social engineering?
Manipulating a person, not a system, to get an action or a piece of data.
How does Whalemate use it?
The category that covers phishing, QRishing, smishing, vishing, USB Drop and deepfake. The platform natively covers the first two; the rest run as a service.
Blog
Articles, guides and analysis on human risk management,
awareness and security culture
Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.
Awareness
Oct 14, 2026By Federico Hombre
NIST, CIS, and PCI on measurable social engineering
NIST, CIS, and PCI call for ongoing or periodic awareness, but evidence alone does not prove fewer clicks. Measure behavior by role.
Read more
Awareness
Oct 13, 2026By Federico Hombre
NIST, PCI and Brazil on social engineering
For CISO, IT and compliance teams, social engineering must be measured with clicks, reports
Read more
Awareness
Oct 12, 2026By Federico Hombre
NIST and CIS on measuring social engineering
NIST, CIS, ISO, PCI, and CISA show that social engineering is measured by recognition, reporting, and response, not just training completion.
Read moreWant to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.