Managing risks requires a holistic approach incorporating not only technological solutions but also other measures such as risk awareness among computer users, solutions providers and management. One of the primary risk factors we face today is Social Engineering. But Social Engineering should also be seen as method of defense, developing human reaction to help prevent successful attacks and reduce risks. This presentation provides some of the basic building blocks for developing an effective awareness program, to reduce risks in a corporate environment.