Security Awareness Company founder: “The weakest link in all of this stuff is the person at the keyboard” Winn Schwartau says security managers are up against a combination of ignorance, apathy and arrogance. Schwwartau: “Even if you have a policy that says ‘Don’t do this or you’ll pay the piper’, generally the “piper doesn’t get paid” Security awareness training needs to include specific instructions not to give out personal information to any person or department, he says. “Let them know: Our department will never ask you for a system is for these new credentials””]
Source: https://www.csoonline.com/article/2125176/social-engineering-stories.html