End User Training

Does anyone have a program in place in which you periodically have a security ‘training’ session with employees? Where you go over issues like, complex passwords, encryption, not opening e-mails from people you don’t know, viruses, phishing? I am looking into implementing something where I work and am looking for lesson plans or ideas on this.

Thanks,

Luke