Instead of an email address to a particular employee, contact information must be in the form of administrator@company.com . Telecommunications department personnel can establish a generic voice mailbox for administrative or technical contacts so as to limit information disclosure that would be useful in a social engineering attack.