In terms of b), one of the messages of the presentation was a shift away from focusing too much on perimeter defense (which would include phishing, probably), a

In terms of b), one of the messages of the presentation was a shift away from focusing too much on perimeter defense (which would include phishing, probably), and making the inside of the network more resilient and costly to attack. It's a counter to the hard shell / soft inside situation which most networks are currently geared towards. In that sense, I don't think it was missed in the presentation, their entire strategy is to deal with what happens when (not if) the marketing guy gives out his password.