An organization is evaluating its defenses against cyber security threats and is concerned about the risks of social engineering by cyber criminals. How might t...