Explanation/Notes: The intention of this policy is to prevent an attacker from spoofing a request to disable an account, and then calling to troubleshoot the user's inability to access the computer system. When the social engineer calls posing as a technician with preexisting knowledge of the user's inability to log in, the victim often complies with a request to reveal his or her password during the troubleshooting process.