Risk Management
As with any information security threat, your institution needs to plan for them, and social engineering from outside of your institution needs to be expected. > Read entire article (log in required - registration is free)