Re: You missed and obvious one...
"User Training and Education"
Sadly, vigilance is not innate to the human condition, and social engineering seeks out the lazy and impulsive. So, yes (voted up), and do the homework to get a really good training program.
Biting the hand that feeds IT
