Are our employees being appropriately trained on cybersecurity?