Social Engineering

  Why do you think Social Engineering is so effective? (Why do you think that even sophisticated cyber actors will use Social Engineering tactics to gain access to a target?) Think about the recent 'active measures' by the Russians to sway public opinion. Do people have a tendency to minimize behavioral or psychological manipulation when considering national or corporate cybersecurity issues?