Security Think Tank: Four key elements to defending against phishing attacks

What are the most effective types of security controls and end user training approaches to dealing with phishing?