Be aware of your surroundings, and don't click on links or provide sensitive information without verifying the authenticity of the request. Train yourself and your employees on social engineering tactics.