database and network administrators.g.  Policies and procedures: for securing confidential information and measures needed to respond to and report any social engineering breaches. combating it also rest with the victims. Staff must be debriefed after penetration test and any weaknesses corrected.  Penetration and testing: on regularly bases by outside expect playing the role of hackers. callHow to deal with it: multi-prong approach should be used to combat it. techniques used by hackers and how to combat it. computer operators and call-center operators. ( employees who deals with both confidential information and the public.  The key to successful social engineering rest with the victims.  . E.  Certain positions are more vulnerable than others. ( multiDamle 2002)  Education and training: all staff ( mostly those in vulnerable positions) must be educated about the risk. secretaries.Types of threats and attacks  social engineering cont. and executive assistants.