This article is devoted to the problem of applying the Bayesian trust network for enterprise risk
assessment. Among the risks that the company is exposed to, we consider operational and strategic risks that may be
associated with the implementation of social engineering attacks by attackers on employees of the enterprise. The article
deals with the problem of identifying user vulnerabilities to social engineering attacks by applying Bayesian belief
networks to the analysis of profile data in a social network for subsequent risk assessment of the enterprise. Based on the
user's profile data, we can potentially determ ine their personal characteristics and, consequently, the ways of social impact
on them. The paper highlights the profile attributes extracted from the social network profile that can be used to build a
Bayesian belief network.