While often viewed as the best defense against social engineering, security awareness training is ineffective and expensive. Most security awareness advice is terrible, just plain bad, and not remotely feasible for your average user. Read about why technical controls edge out security awareness training when it comes to social engineering defenses in this Dark Reading blog post by Senior Security Associate Rob Ragan - Social Engineering Defenses: Reducing The Human Element