What should an employee do if they receive a suspicious phone call asking for sensitive information?
The employee should not provide any information and should hang up, then report the incident to the security officer for further investigation.