Roles and authority
- who may disclose information
- who confirms exceptions
- where authority is described ambiguously
- which roles carry an elevated burden of trust
Обновлено
01 / AUTHORIZED SOCIAL ENGINEERING ASSESSMENTA company's security is tested at the moment a convincing request meets a real process
BLACKFILE conducts controlled and written-authorised tests of how employees, contractors and internal procedures respond to attempts to obtain information, alter an action or bypass established procedure
We assess not "weak people" but the combination of context, authority, communication channel, quality of procedure and availability of a safe escalation path
The test does not begin until written authorisation, the composition of participants, prohibited actions and conditions for immediate stoppage have been agreed
- ROLE CONTEXT
- REQUEST TYPE
- TRUST SIGNAL
- PROCESS CONTROL
- ESCALATION PATH
- SAFE STOP
02 / PEOPLE AND PROCESS
Most dangerous requests do not look dangerous - they look plausible
A message may refer to urgency, a manager's authority, a routine process, a business context or a wish to help a client. Even an experienced specialist can make the wrong decision if the procedure is ambiguous, confirmation is difficult and a safe escalation path is not defined
This is why the result of a test should not be reduced to a percentage of "those who made a mistake". It is necessary to establish why the particular situation became possible and what change to the process will reduce the risk of recurrence
The purpose of the check is to strengthen the decision-making system, not to catch or publicly punish an employee.
- Context→
How well the request fits an ordinary working situation.
- Authority→
Whether the employee is entitled to perform this action without approval.
- Check→
Whether there is a way to independently confirm the request.
- Escalation
Whether a safe way to stop and clarify is known.
03 / SCENARIOS
When access to information depends not only on technology but on a human decision
- 01
The company is preparing for a transaction
The number of external requests is growing, and employees are engaging with new advisers, counterparties and platforms.
- 02
Assistants handle sensitive instructions
Calendars, routes, documents, payments and personal contacts pass through a small circle of trusted staff.
- 03
Financial transactions are confirmed through communications
A change of payment details, an urgent payment or a non-standard instruction can be initiated by a convincing message.
- 04
Contractors have access to internal processes
External teams take part in IT, finance, hiring, communications or administration and become part of the circle of trust.
- 05
There have been suspicious e-mails or calls
It is necessary to check whether staff response is stable and whether the incident reporting channel works.
- 06
The company is expanding or changing its structure
New employees, roles and countries create temporary gaps between formal policy and actual practice.
HUMAN FACTOR / PROCESS
Опасные запросы выглядят правдоподобно. Процедура и эскалация решают больше, чем бдительность.
04 / OBJECTS OF ASSESSMENT02 03 04 05 06
Not only the employee's response, but the entire system around the decision
Communication channels
- corporate e-mail
- voice calls
- messengers
- internal services
- communications with contractors and advisers
Trust signals
- a familiar name or position
- urgency
- reference to a manager
- knowledge of the working context
- a familiar tone and format of address
Control procedures
- independent confirmation
- the second-participant principle
- callback to a known contact
- access segregation
- logging of unusual requests
Escalation path
- whether the employee knows where to turn
- whether the action can be suspended without approval
- how quickly help is available
- whether the employee receives clear feedback
Organisational context
- workload and urgency
- staff turnover
- remote work
- multiple languages and countries
- gap between policy and actual process
05 / HUMAN ATTACK SURFACE MAPROLE / 01
Risk arises at the intersection of role, request, trust and process
The same request may be safely declined in one department and lead to an error in another. The map does not rank people - it shows recurring conditions under which controls stop working
InformationAccessPaymentDocumentProcess changeUrgent instruction
Control workedClarification requiredProcedure ambiguousMaterial gap
Finance
Payment and urgent instruction - the area of highest risk: a change of details proceeds without independent confirmation through a known channel
- InformationControl worked
- AccessClarification required
- PaymentMaterial gap
- DocumentControl worked
- Process changeProcedure ambiguous
- Urgent instructionMaterial gap
Red marks only a material process gap. Employee names are not shown in the interface. On the mobile version the matrix becomes a vertical index of roles with expandable scenarios
06 / CONTROLLED SCENARIO
Each check begins with authorisation, limitations and conditions for immediate stoppage
- 01
Written authorisation
The authorised client, legal grounds, departments, countries and the period of the engagement are recorded
→ - 02
Rules of engagement
Permitted channels, allowed actions, excluded categories and persons who must not be involved are defined
→ - 03
Stop Conditions
Events triggering immediate termination of a specific scenario or of the entire check are established
→ - 04
Scenario design
Scenarios model risk but do not require obtaining real passwords, financial credentials, or sensitive data.
→ - 05
Controlled execution
The course of the check is recorded, and access to the results is limited to the authorized team.
→ - 06
Analysis and improvement
Results are translated into changes to procedures, training, and escalation channels without publicly singling out employees.
DEBRIEF / PROCESS FIX
Цель проверки - укрепить систему принятия решений, а не наказать сотрудника.
07 / RESULTD-01 D-02 D-03 D-04 D-05 D-06
A map of process risks and specific changes that can be implemented
Executive Summary
A brief description of the most material risk conditions, without unfounded ranking of individual employees.
Map of roles and scenarios
Which combinations of authority, channels, and requests require additional control.
Timeline of the check
What was checked, under what conditions, and how the response developed.
Control matrix
Which procedures worked, where ambiguity arose, and where a safe verification path was absent.
Remediation priorities
Changes by urgency: immediate, short-term, and systemic.
Re-check plan
Criteria for assessing whether risk has decreased after the changes.
08 / CLIENTS
For organizations where one persuasive request can affect money, data, or a decision
- CL-01companies and international groups
- CL-02financial and investment structures
- CL-03Family Offices
- CL-04legal teams
- CL-05technology companies
- CL-06projects ahead of a deal or entry into a new country
- CL-07organizations with a network of contractors
- CL-08private structures with assistants and staff
09 / TYPICAL SCENARIOSSE-01Composite example Confirmation chainSE-02Composite example Decision treeSE-03Composite example Escalation map
How the check identifies the process cause rather than merely recording the error
Change of details
It is checked whether a non-standard financial instruction requires independent confirmation through a channel known in advance.
Request on behalf of a manager
It is assessed whether a reference to authority and urgency can substitute for the established approval procedure.
External contractor
It is checked what information an employee discloses to a party who is familiar with the working context but has not passed the established identification.
10 / ENGAGEMENT FORMAT01 02Most requested 03Multiple countries
Cost depends on the number of roles, channels, scenarios, and jurisdictions
Baseline assessment
from €3,000
The timeframe is determined by the scope of the check
Initial verification of resilience within a limited scope of roles and channels.
Composition
- 1-2 controlled scenarios
- limited group of roles
- verification of one or two channels
- map of initial process risks
- brief recommendations
Extended check
7 000-14 000 €
The timeframe is determined by the scope of the check
Full verification of the scope with a risk surface map and remediation priorities.
Composition
- several roles and departments
- 5-7 agreed scenarios
- comparison of channels and procedures
- Human Attack Surface Map
- remediation priorities
- final review with the authorized team
International programme
Individual quote
Phased execution according to an agreed schedule
Verification programme for an international structure with re-assessment after changes.
Composition
- several countries or companies
- differing languages and processes
- phased verification
- coordination with legal and information security teams
- re-verification after changes
The exact scope, permissible scenarios, budget, and completion criteria are agreed in writing before the check begins.
11 / AUTHORIZATION
No verification is conducted without written authorization and safe limitations
BLACKFILE does not conduct unauthorized checks on third parties, does not help obtain other people's data or access, and does not publish personal results of employees. Specific scenarios undergo legal review with regard to the country and organization.
- written authority of the client
- precise scope and term
- agreed countries and departments
- prohibition on involving minors
- prohibition on obtaining real passwords, codes, bank details and personal documents
- absence of malicious attachments and disruption to systems
- prohibition on pressure, threats, humiliation and discrimination
- predefined stop conditions
- limited access to results
- training and correction of the process rather than public punishment
12 / RELATED SERVICES
What strengthens verification of the human element
SRV-01
Vulnerability Analysis
Systemic assessment of pressure factors and organizational weaknesses.
Open the practice area →SRV-02Leak Response
Work with information disclosure that has already occurred.
Open the practice area →SRV-03Environment Check
Verification of confirmable connections and environment within the scope of a lawful task.
Open the practice area →SRV-04Background Check
Verification of biography, business history and risk factors for an agreed role.
Open the practice area →13 / QUESTIONS
What is important to understand before the check begins
This is determined by the legal environment, internal policies and the agreed scenario. In any case, the check must be authorized in writing by an authorized party, have clear limitations and a proper follow-up review.
No. Scenarios are designed to test decision-making and procedure without obtaining actual credentials, banking details or sensitive information.
The purpose of the service is to assess the resilience of the system and improve processes. Personnel decisions fall within the client's competence and must comply with applicable labor law. The result of one scenario should not be interpreted outside its context.
No. Within the agreed scope, various communication processes, roles, confirmation of instructions and the escalation path may be assessed. Specific scenarios depend on the client's risks.
Only where appropriate authority, contractual grounds and written agreement on the scope of the check are in place.
The client receives a map of process risks, priority changes and criteria for a repeat check. The result must lead to an improvement of the system, not remain merely a report.
14 / INITIAL ASSESSMENT
Describe the processes that need to be checked
At the first stage, do not indicate employee names, e-mail addresses, phone numbers, passwords or other personal data.
Check your decision-making system before this enquiry does
Describe the processes giving rise to concern. BLACKFILE agrees the scope of authority, boundaries and stop conditions before any check begins.