RT Book T1 Tonga’s organisational vulnerability to social engineering A1 Fe’aomoeata, Viliami A2 Lutui, Raymond LA English YR 2017 UL https://krimdok.uni-tuebingen.de/Record/1866585231 AB Tonga is a small developing island in the south pacific and ICT is still in its early stages. In this paper we ask the questions, what is social engineering and who is this social engineer, what are the threats to Tonga, how can these threats be identified and which countermeasures can be taken to mitigate the risk of social engineering? The answers to these questions will lead to a social engineering risk management framework to make the risks of social engineering more transparent and help organisations implement mitigating controls against social engineering. The study was performed in four chosen organisations in Tonga, who were involved with Information Communications, Finance, and Cyber Security in order to model threats and countermeasures and develop a risk management framework