One of the most powerful methods for the social engineer to carry out this kind of attack is the simple ploy of pretending to need help—an approach frequently used by attackers. You don't want to stop your employees from being helpful to coworkers or customers, so you need to arm them with specific verification procedures to use with anybody making a request for computer access or confidential information. That way they can be helpful to those who deserve to be helped, but at the same time protect the organization's information assets and computer systems.