Security Think Tank: Defend against phishing with training, technology and reporting

What are the most effective types of security controls and user training approaches to dealing with phishing?