Security Think Tank: Combine technology and communication to combat phishing risks

What are the most effective types of security controls and end user training approaches to dealing with phishing?