Identification should include

reporting phishing
verifying the address and the domain of a sender
refraining from clicking any advertisements in the work environment
being aware of spoofing (i.e., sending an email from someone else’s address)
refraining from clicking on links; instead, copy and paste the URL into the browser
using a separate communication channel (e.g., telephone) to verify requests
protecting personally identifiable information (PII)
refraining from sending internal documents to external addresses

Process/Skill Questions: