The social engineering principle that an attacker could impersonate a ceo of a company is with the use of authority. This is the process of which people likely does what they are told do and the person who tells them what they should do and follow are the ones who are authorized or who has the authority to do so. It is the most effective in vishing attacks, impersonation and even whaling.