You may look at the adopting the webpages of CISA: Avoiding Societal Engineering and Phishing Symptoms -