Do companies actually have a safe word for executives now?

I know this sounds ridiculous but with AI voice cloning getting better I started wondering if companies have some simple way to verify an executive when they make an unusual request. Say someone from HR gets a call that sounds exactly like the CEO. They need employee information or want something sensitive changed urgently. The number looks right and the person knows enough about the company to sound convincing. I read abt kibu while reading about this. Instead of relying on recognizing a voice or trusting a phone number it lets people establish trusted connections and verify each other again when something sensitive comes up. It basically made me wonder what everyone else does. Verification phrases? Callbacks? Or smth through IT?