Most businesses put their cybersecurity budget where it's easy to see. Firewalls, antivirus, backup and recovery, all doing exactly what they're built to do.

But none of it stops someone picking up the phone and just asking for what they want.

That's social engineering and it's quietly become the way most successful cyberattacks get in, not through malware sneaking past a firewall, but through one person trusting another at the wrong moment.