Give something that they can relate to in both the office and real life. like shoulder surfing and spyware. Maybe you can somehow show them how much information spyware can actually send out. The best scenerio being having a custom script that sends out info from a "mock" workstation to another workstation.

As you can tell I am against spyware since where I work they let them download alot of "cute" things (Webshots, comet cursor, etc) I like to make it a point that some of the most "invisible" and damaging code comes from games and things that look harmless.


Also maybe set up some user accounts with some easily crackable passwords that may be in the network (all of these made up but maybe one or two of them may have them) to stress the importance of strong passwords.

Basically, show them the power of the darkside and show them ways not to be a target.