Select target employees based on profiles - Design pretexts based on OSINT findings - Build email templates, landing pages, and phone scripts - Set up campaign infrastructure (phishing domains, email servers, call equipment) - Conduct peer review of campaign materials - Obtain final client approval