Nowadays, blocking spyware takes place primarily on end-user workstations, and many spyware-blocking programs still rely on frequent user interaction in order to keep signature files and software up to date. If your organization is going to have any chance at winning (or at least, not getting involved in) the spyware wars, your users had better know what to do and how to do it. Users should also be aware of the consequences of not keeping up on scanning and updates -- infection by spyware and potential reprimand for not following corporate security guidelines.
More than that, users need to know -- at least on a rudimentary level -- what spyware is all about. The reason for this is that spyware-blocking tools are not 100 percent effective, so diligence on the part of users is another important factor that helps prevent spyware from breaking into your environment. If you can't get users' attention regarding protecting the company assets, you might also point out that spyware doesn't discriminate between company data and personal data.
Good tips, as usual. Thanks Christo.