Maybe add some examples of social engineering? e.g. fraudsters calling and pretending to be bank staff.