Having trained more than 3.1 million employees (using PhishMe.com) at universities, government agencies, and large enterprises, we have found that immersing people in the experience through mock phishing exercises, and presenting immediate, bite-sized educational to those who are susceptible has had the desired effect of reducing human vulnerability to these attacks.
FORBES: As Neighborhood Watch For The Web, Google Now Flags Nearly 10,000 Dangerous Sites Daily