Forget security training, it's never going to solve Layer 8 (aka people)

Human curiosity will always trump anti-phishing schemes

Black Hat Research by German academics has shown there's very little that can be done to prevent people spreading malware by clicking on dodgy links in messages, particularly where Facebook is involved."