The human firewall is something that I have heard many times in many different ways. Human firewalls, the education and training of individuals about current cyber threats and ways to not be taken advantage of, are among the most important things. Individuals are much too easy to coax information out of with the right mix of anonymity, wording, and perceived authority. My current employer has bi-weekly information about phishing attempts that have been spotted and caught so that all employees are aware of anything new that may be going on.