Security culture, the Dropbox way

"... daylong social engineering workshop designed and led by internal experts that immersed them in a hypothetical scenario involving a malicious insider."

"... a hands-on workshop where Dropbox employees researched, crafted, and presented their own phishing schemes."

"... our annual Capture the Flag"

It's interesting the emphasis on social attacks. You only have to get the cryptography right once, but every employee needs to defend against social engineering.