The report also found that simply protecting employees in sensitive departments is not sufficient to protect against BEC.
Source: Threadpost