Effective countermeasures can be put into place against most types of social engineering attacks. But let's face reality here—unless everyone in the enterprise understands that security is important and makes it his or her business to know and adhere to a company's security policies, social engineering attacks will always present a grave risk to the enterprise.