Businesses should train staff how to detect and avoid falling victim to social engineering to help keep their data secure, an expert has said.