I've just made a presentation.
As a system(or network or everything) admin, I thought that user literacy is the key to administration.
(Disaster-)Preventive education (to get LITERACY) is more important than incident response. (Of course incident response is important. But preparation of it is more important too.)
Here is my plan. Make an attractive portal site for insiders of your company.
In the site,
administrators can hide some tricks to kick them to be educated.
both user and administrators can get immediate response.
user could know who is in the server, and hopefully be friend.
we can centralize resource.
we can simplify client-environment enough to keep them clean.
anyway, if you were interested in, please click my presentation.