HRM glossary

Social engineering

Manipulating a person, not a system, to get an action or a piece of data.

Definition

The category that covers phishing, QRishing, smishing, vishing, USB Drop and deepfake. The platform natively covers the first two; the rest run as a service.

HRM glossary

SSO / SAML 2.0Single sign-on using the SAML 2.0 protocol.

USB DropLeaving a physical device (USB) to see who plugs it in.

VishingPhishing via voice call, including voice cloning.

2FA / MFASecond authentication factor, native for platform administrators.

HRM glossary

Questions about Social engineering

What is Social engineering?
Manipulating a person, not a system, to get an action or a piece of data.
How does Whalemate use it?
The category that covers phishing, QRishing, smishing, vishing, USB Drop and deepfake. The platform natively covers the first two; the rest run as a service.
Blog

Articles, guides and analysis on human risk management,
awareness and security culture

Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.

APWG and PCI DSS: Smishing Is Rising
HRM
Sep 11, 2026By Federico Hombre

APWG and PCI DSS: Smishing Is Rising

Smishing is growing on mobile channels while PCI DSS v4.0 requires annual awareness training and explicit phishing and social engineering content.

Read more

Want to see HRM in your organization?

Book a demo and we'll look at the program with data from your industry.