End the interaction and report it to the security team or supervisor. Social engineering exploits the natural tendency to be helpful in professional interactions. The training builds the recognition that legitimate business contacts don’t need to ask for information in unexpected ways — and that a polite refusal is always the right response