a) Explain how risk is assessed based on the likelihood of adverse events and the effects on information assets when events occur. [5 Marks]

b) Social engineering is a means of gathering information for an attack by relying on the weaknesses of individuals. If you were to create your own social engineering attack, what would it be? Using your place of employment or school, first determine what your goals would be in the attack, and then craft a detailed description of how you would carry out the attack using social engineering to achieve your goal.