I’m trying to get some ideas on how to test my company’s security. I want to somehow test the end-user. The one thing I’ve come up with so far is have a manager call users and ask the user for their password for the network. I guess my question is has anyone done this for your company and if so what did you do?