Two years ago ENISA published an excellent guide on how to raise information security awareness within your organisations.  A new version of the guide is now available and well worth the time taken to download and read it.  Security awareness can be one of the most effective defence measures you can invest in.  Once you have created a culture of security within your organisation and trained users on how to identify potential threats your greatly reduce the ability of attackers to breach your organisation.