It is important to note that maintaining such lists is an invitation to the social engineer. Consider: If an attacker targeting a company becomes aware that the company maintains such lists, there is a strong motivation to obtain one. Once in hand, such a list opens many doors to the attacker and puts the company at serious risk.