Security Think Tank: Phishing awareness a key element of a security positive culture

What are the most effective types of security controls and user training approaches for dealing with phishing?