How easy is it via email to contact a person outside of your company? Do people actually answer emails from random strangers? Seems like an easy way to become a phishing or social engineering victim.