There should be standard procedures for this. Something like, you go through the emails for compromising materials, so you would know vectors of attack beforeha

There should be standard procedures for this. Something like, you go through the emails for compromising materials, so you would know vectors of attack beforehand, and train the person to not fall for them.