Since many forms of malware are instantiated by user action, it’s important to educate your end users on what malware is and how to avoid it. This education can take the form of one on one personal training or group training sessions.
Posters and signs are also good ways to visually remind end users of best practices regarding malware.
Messages displayed when a user logins can also be used to educate end users.
Training resources can also be kept on your company’s Intranet page so that employees have a central area to access this information.