Competency area
Human Element & Information (OSINT)
Knowledge of OSINT and social engineering helps me understand how public information and manipulation can affect security. I use it to assess dependencies and inform decisions within technical services.
Public information and organisational context
OSINT means gathering and analysing information from open sources. An individual public detail can become significant when combined with a person’s role, the name of a service or document metadata. Not all public information is confidential, but its context matters.
Manipulation and access decisions
Social engineering can exploit time pressure, apparent authority and knowledge of a business. When agreeing access and ways to confirm changes, I account for impersonation risks and requests to bypass established rules.
How it informs technical services
- It helps me account for the consequences of excessive permissions if a user account is compromised.
- It draws attention to information exposed through documents and system-related messages.
- It helps explain why an unusual access request should be confirmed through another agreed channel.
Scope and limitations of this knowledge
This competency area supports technical work. I do not offer separate OSINT investigations, training, phishing simulations or active social engineering campaigns here.
Public availability does not mean information can be used without restriction. Context, privacy and authorisation still matter. Certificates document knowledge and training rather than specific work carried out for clients.
Questions and answers
Does removing information from a website remove it from the internet?
Not necessarily. Copies may remain in archives, search results or documents held by others. Removing the source does not mean all copies have been removed.
Is a convincing sender address enough to approve a request?
The appearance of a message alone does not establish authority to request a change. Sensitive actions need an agreed way to verify both the person and their authorisation.
Applying this knowledge to system protection
I use these considerations as context for administration and network security services. The links below explain their scope.
Related areas
Reducing the impact of a compromised account also involves Administration & Hardening.
Restricting access between resources is covered by Network Infrastructure & Security.
Certificates document knowledge and training; they do not demonstrate a particular implementation or, on their own, establish the scope of services offered.