Not plugging the company but wanted to post this as I brought it up at Fraud seminar:
www.knowbe4.com There are cool tools that let you do fake phishing emails to your employees and track who click on the suspicious link or opened the attached file. VERY eye-opening! There are also lots of web-based training options and you can specify how many minutes you think people can stand ;-) and it will suggest various training modules depending on time.
We ran this internally and for clients and even simply doing one phishing "test" really raises awareness. When we run subsequent tests the number of people who fall for the fake emails drops a lot...
------------------------------
Steven Chiang
CEO
HammerTECH LLC
Honolulu HI
(808) 206-7724
------------------------------