Do not provide password resets in a chat window

Resist the urge to click on enticing web links

Educate employees regarding security policies

Enable a policy that states that the IT department should supply information over the phone only to managers

Add more security guards

Deploy well-designed firewall appliances