Traditional penetration testing is a by-the-book endeavor that relies on probing for external weaknesses, and when found, pivoting through the internal devices of an organization’s network.
This is only effective when assessing technical safeguards. The very nature of social engineering attacks, however, require a very different set of skills to defend against.