premise: Users disclosing sensitive information or passwords in response to seemingly innocent requests from strangers either over the phone or in person can provide intruders easy access to an organization's information and systems.
hypothesis: There are no users disclosing sensitive information or passwords.