A risk practitioner has been notified of a social engineering attack using artificial intelligence (Al) technology to impersonate senior management personnel. Which of the following would BEST…

AI-driven social engineering preys on human psychology and trust; therefore, training employees to recognize sophisticated impersonation attempts, verify requests, and report suspicious activity is the most effective proactive defense against these evolving threats.

Increased monitoring of executive accounts is a reactive measure that may detect a breach after it occurs, rather than preventing the initial social engineering success.

Subscription to data breach monitoring sites helps detect if data has been compromised, but does not prevent the initial social engineering attack itself.

Suspension and takedown of malicious domains or accounts addresses the infrastructure of the attack but does not prevent employees from falling victim to initial impersonation attempts.