You can have all the security hardware and software in the books: firewall, backup and recovery, anti-virus; but your employees will still be the biggest vulnerability when it comes to phishing attacks. How do you mitigate as much risk as possible?