Appropriate venue to find out about the state of art of spear phishing defense?

[Michael Thomas <mike () mtcc com>]

I know this is only tangentially relevant to nanog, but I'm curious if 
anybody knows where I can ask what orgs do to combat spear phishing? 
Spear phishing doesn't require that you deploy DMARC since you can know 
your own policy even if you aren't comfortable publishing it to the world.

tia, Mike