The human element is crucial in the majority of successful attacks on systems & attackers are rarely required to find technical vulnerabilities, hacking the human is usually sufficient. This text highlights the main sources of risk from social engineering & draws on psychological models to explain the basis for human vulnerabilities.