What is social engineering? Implementing controls to minimize the threat and limit the risk, malicious act where the attacker manipulates an employee, the active training employees to use an organizations IS$,$ The probabilitythat each asset will be compromised