# Social Engineering Campaign Assessment

> From $7.5K · Offensive Security · https://cisomarketplace.services/services/social-engineering-assessment

Comprehensive social engineering assessment including phishing campaigns, vishing attacks, physical security testing, and employee awareness evaluation.

## In scope

- Phishing campaign development
- Vishing attack scenarios
- Physical security tests
- Employee awareness evaluation
- Access control testing
- Removable-media and tailgating exercises (upper tiers)
- Training session for the groups that responded (upper tiers)

## Deliverables

- Campaign effectiveness report
- Employee vulnerability analysis
- Security awareness recommendations
- Training program design
- Response procedure assessment

## Tiers

### Entry — market-sized scope: $7.5K

One email-only exercise for up to 100 staff with a results report. The smallest version of this work.

Limits: employees 100, scenarios 1

Includes:
- One email exercise
- Results by department
- Awareness recommendations

Excludes:
- Phone-based and on-site exercises
- Follow-up training

### Core Social Engineering Assessment: $25K

Email exercises for up to 500 staff: 2 campaigns plus an awareness baseline.

Limits: employees 500, scenarios 2

Includes:
- Two email campaigns
- Awareness baseline
- Executive summary

Excludes:
- Phone-based and on-site exercises

### Advanced Social Engineering Program: $45K

Email and phone exercises for up to 2,000 staff, plus on-site testing at one location.

Limits: employees 2000, scenarios 4, locations 1

Includes:
- Email and phone exercises
- On-site testing at one location
- Targeted coaching for repeat responders

Excludes:
- More than one on-site location

### Enterprise Social Engineering Solution: $75K

All channels for up to 5,000 staff, on-site testing at up to 3 locations and a follow-up awareness program.

Limits: employees 5000, scenarios 8, locations 3

Includes:
- All channels
- Up to three on-site locations
- Follow-up awareness program

Excludes:
- Ongoing monthly simulations — see Managed Security Awareness

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=social-engineering-assessment