Social engineering is the practice of manipulating people into divulging confidential information or performing actions that are not in their best interest. Security professionals use this type of testing to evaluate the effectiveness of their training methods and to identify potential threats.