**IT/Help Desk**: Often the first target for pretexting calls. Help desk staff are trained to be helpful, which can be exploited. - **Human Resources**: Has access to employee data and is accustomed to receiving resumes and documents (potential phishing vectors). - **Finance/Accounting**: Has author