A company's help desk has been targeted by attackers who call pretending to be senior executives and urgently demand password resets, successfully tricking agents into bypassing normal procedures. Which control most directly reduces the success of this pretexting-based social engineering technique?