It can. Alongside phishing, vishing, and smishing, we can test physical defences through tailgating, impersonation, and baiting where it’s in scope. We agree exactly what’s included during scoping.