Education is key. A great way to do that is with http://phishme.com/ http://phishme.com/, were you can also assess how vulnerable you'd be. The bad thing is tha

Education is key. A great way to do that is with http://phishme.com/ http://phishme.com/, were you can also assess how vulnerable you'd be. The bad thing is that convincing an IT department to use it and maybe embarrass other people, specially technical, is hard.