What would be the best approach to protect an organization from phishing attacks? Identify how an organization might be at risk and outline a policy for the organization that would reduce the likelihood of being compromised by a phishing attack. Consider information technology as well as people and procedures that would safeguard the organization.