Phishing attacks are not going away by any means; however, they can be mitigated with a well-defined plan which includes detection, response, training, and prevention.