Within the context of Computer Security, which of the following statements describes Social Engineering best?

Publicly disclosing information describes a data breach or whistleblowing activity, not social engineering, which involves targeted deception of specific individuals to extract information.

Time accounting by human resources is an organizational administrative function entirely unrelated to cybersecurity attack techniques or adversarial behavior.

Social engineering in cybersecurity is defined as the psychological manipulation of individuals to obtain confidential information or access, bypassing technical controls entirely. Rather than exploiting software or hardware, an attacker deceives or coerces a person - such as a help desk employee or end user - into providing credentials, access, or sensitive data. The technique relies on human trust and error rather than technical vulnerabilities.

Social engineering in security has no connection to academic sociology training programs; it refers specifically to human-based attack vectors used by adversaries to manipulate victims.