Mechanisms exist to include awareness training on recognizing and reporting potential and actual instances of social engineering and social mining.
Does the organization include awareness training on recognizing and reporting potential and actual instances of social engineering and social mining?