Social Engineering - Information Security; The Weakest Link

Implications: Social Engineering is an age old tool of spy's and new age hackers.  Using access credentials of authorized users is the easiest and less noticeable means to assume controls of technology resources.  "What you have" authentication factor(s) can provide administrators an upper hand in ensuring only authorized users access.

Analysis: Information Security technology is hard pressed to cover the gap between prudent security policy and technology when social engineering trumps the best of efforts.  Social engineering is an effective tool in the hacker's toolbox; preying on the nativity and/or unwarranted trust of their victims.
Technology that requires the user to have possession of a token or object gain access to information technology resources is the best measure to tackle this ever growing challenge.  Two, or Three-factor authentication requiring  something such as a key fob or software token to validate the use of a specific user ID not only provides a higher level of authorized use, but can also combat infamous dictionary attacks.
Certain technologies use rotating keys to ensure the token is in sync with back-end resources.