Even with strong technical controls, an email, phone, or USB scenario can produce credentials and insider access. Social engineering testing simulates phishing and similar people-focused vectors within legal and ethical limits, with written, approved target groups. Hiring, a rise in supplier fraud, or measuring an awareness program can require this work. Mailing random large audiences or humiliating staff is not part of the service; copy, send list, and stop rules are locked in advance.
TARGON does not hide social engineering as an extra slide on pentest or red team. HR and information security cut the scenario together; results are delivered as an executive summary and improvements (process, training, technical control) without naming individuals. Employee names, photos, or shaming evidence are not published. Taking this service from TARGON binds the human vector to technical pentest under the same counterpart and authorization frame.