Аннотация. In the current era of technology and the internet, businesses are gradually relying on information technology to operate and manage their business assets. As such, social engineering (SE) has become one of the greatest ingenious approaches to gain illegitimate access to systems and obtaining confidential data. These attacks employ human mindset to deceive people into revealing confidential data or executing activities that compromise security. Knowledge of SE attacks is essential to deter possible cybersecurity attacks related to the organizational information security. More technical SE attacks have continued to be realized than non-technical SE attacks. The study reveals that SE attacks have increased and that the most looming SE attack is phishing. The study focuses on developing a framework to secure business assets against social engineering attacks in State Corporations in Kenya. The outcomes from this study points out that the level of employee IS awareness and training hold a significant position for managing social engineering attacks in state corporations in Kenya. The developed framework is recommended to be utilized in state corporations in Kenya and it act as a guide ensuring that business assets are secured against social engineering attacks.