How to keep your flock of users secure: Let them know exactly who and where the wolves are

Rather than talk about generic threats, go through some examples with people

RSA When it comes to getting your users up to speed with cyber-security, the best approach is to give it to them straight. Practicalities over jargon. Specific examples of threats are very persuasive, rather than simply insisting people enable a firewall and malware scanner, check regularly for updates, and avoid clicking on any suspicious attachments and links."