A phishing attack is a computer-based social engineering, where an email is sent by an attacker which appears genuine. They contain some links to fake websites, but they appear to be received from the original sites. Discuss ways that companies can implement policies to protect against phishing attacks.