David will present an eye-opening account of how social engineering can be used to attack a critical infrastructure organisation — and demonstrates well the blur between what were corporate and operational networks — where some critical systems are spilling onto the corporate side due to access requirements and ease of deployment/maintenance.