User Training
User training is an excellent idea, but repercussions for the one person who happened to click on a malware link is pointless. For one thing it's too late - you've still suffered the attack, for another too many people are likely to click - it's that you've got to change.