Catching phish: How to avoid users getting hooked

Effective IT security boils down to user education. We find out how one company got on with testing its staff