In the first and second articles, we talked about what Phishing is, and provided some general tips for avoiding common types of phishing attack.  However, there's really more to it than that.  A truly security-aware organization should place an emphasis on employee education and training.  "Social engineering" style attacks - like phishing - can happen to anyone, at any workplace, and they can subvert all the work you've put into building your IT defenses.