One of the challenges we face as corporate Information Security professionals is educating the users and make them understand the various threats in the online world. No matter how hard you try some users don't get it and they keep doing the things that jeopardizes the security of the organization. They think that the various risk analysis we do are made up and done to create FUD and justify the costs for deploying the various security devices.

Here is an example of people still doing such things as logging into their bank accounts from public computers.

Hotel hacker confesses to Trojan mayhem