I suspect the ability to know the name of the book the CEO recommended a particular executive over a particular timescale won't be especially useful to future scam attempts...
I think a better solution is to verify that it's not a deepfake or other phishing attempt by contacting the person through a different communication channel that you already know and asking them to confirm that the suspect communication was really from them.