IT security teams and call centres have a lot of privileged access. They have control over accounts and smart devices and if they’re tricked, their privileges can easily be used by a malicious party to get access or exploit the system.
Source: Cyber Management Alliance