Continuing to build on our social engineering awareness policy, write a policy statement and simple procedure for handling requests for sensitive information.
