We propose strategies of how New Zealand organisations can close their security gaps with protection against phishing, stolen credentials and other threats.