Trust your gut, not the caller.

Cyber criminals are good at impersonating corporate workers on the phone. Real IT staff and leadership will never call you on an outside line or pressure you to log into a system for them.