Emsk's On Phishing Training And Phishing Simulations: The Rant

I don't know Emsk personally, just through the NZ online cyber security community. What I do know is that they have some solid opinions on phishing and have articulated them quite well.

They also link to the Google blog "On Fire Drills and Phishing Tests" which is also good material.