Imagine you leave your house keys under the doormat – that’s like a weak password. Now imagine someone calls pretending to be from the utility company and asks for your alarm code – that’s social engineering. Information security threats work the same way, only they target the data and systems that businesses depend on. This chapter looks at the many ways attackers can break in – not just through clever code, but also by tricking people – and what makes modern organisations so vulnerable.