What happens if staff fails to follow social engineering policy?
One key element in inspiring compliance is to establish the value of the information. One way to do that is to stress the importance of protecting information and establishing consequences for not doing so. This week, write a policy statement that explains the consequences of not following policy. Be specific about the possible ramifications to both the organization and the employee if information is disclosed inappropriately.