The article gives an approach to assessing the success of a socially engineered attacker's attack on an information system user. More accurate approximations are obtained, based on the aggregation of information on a wider range of factors that affect the evaluation of the probability of success of the social-engaging attacking attack of the attacker