We send monthly phishing simulation emails to employees to keep them sharp about social engineering attempts. The simulations are accompanied by training videos, which walk each employee through the tell-tale signs that someone is trying to impersonate a person in power or otherwise gain unauthorized access to sensitive data.  We also keep all employees aware of any credentials that have leaked to the Dark Web and ask them to follow password creation best-policies (complexity requirements, good password hygiene, no reusing, etc.) The manager(s) at your work also have access to employee safety scores, so everyone is on the same page and we can focus on the most vulnerable employees.