In every organisation, regardless of security technology in place, there are still the risks associated with the people who interact with your information and IT systems. Employees however should be empowered and educated about technology risks in order to become the first line of defence against security threats.