Which of the following option would be the best choice to guard against social engineering in a large organization ?

End user education is the most effective defense against social engineering attacks because these attacks target human psychology rather than technical vulnerabilities. Social engineering manipulates people into divulging sensitive information or performing actions through deception, often via phishing emails or phone calls. Training users to recognize manipulation tactics, verify requests, and follow security procedures is critical. Technical controls like firewalls, inbox rules, and intranets cannot prevent users from voluntarily revealing information or performing actions if they are deceived.