Social Engineering Attack Probability Calculator

Estimate social engineering attack success probability based on employee training level, verification controls, and target specificity (spear phishing vs generic)

Each component has a specific meaning:

• Employee training level — The employee training level recorded for the patient or scenario being assessed.
• Verification controls — The verification controls recorded for the patient or scenario being assessed.
• Target specificity — The target specificity recorded for the patient or scenario being assessed.

Note: Interpret the social engineering risk result against the clinical thresholds and context described above.

Enter the employee training level, verification controls, target specificity for the patient or scenario you are assessing. Estimate social engineering attack success probability based on employee training level, verification controls, and target specificity (spear phishing vs generic). Use the social engineering risk result to inform your clinical assessment.