We talk about phishing, spear-phishing, and other scary security things. We remind people that the best way to protect your organization from attacks is education.