Which of the following would MOST effectively reduce social engineering incidents?

A.
Security awareness training

B.
increased physical security measures

C.
E-mail monitoring policy

D.
intrusion detection systems

Explanation:
Social engineering exploits human nature and weaknesses to obtain information and access privileges. By
increasing employee awareness of security issues, it is possible to reduce the number of successful social
engineering incidents. In most cases, social engineering incidents do not require the physical presence of the
intruder. Therefore, increased physical security measures would not prevent the intrusion. An e-mail monitoring
policy informs users that all e-mail in the organization is subject to monitoring; it does not protect the users from
potential security incidents and intruders. Intrusion detection systems are used to detect irregular or abnormal
traffic patterns.