An IT employee got a call from one our best customers. The caller wanted to know about the company's network infrastructure, systems, and team. New opportunities of integration are in sight for both c

Providing any information, including a staff member's name, without authorization can seed a social engineering attack by giving an attacker a foothold for further manipulation.

Customer service values do not override information security policies - disclosing sensitive infrastructure details violates the principle of least privilege and confidentiality.

Sensitive information about network infrastructure, systems, and team composition can be exploited in social engineering or targeted attacks. Even a trusted caller's identity cannot be verified over the phone without a proper verification process. Requiring management authorization ensures accountability and prevents unauthorized disclosure of confidential company data.

Hanging up without explanation is unprofessional, unnecessary, and does not follow proper security protocol, which requires polite redirection and escalation to an authorized person.