Every employee needs to become cyber aware, to internalize the knowledge that they are responsible for protecting sensitive data, regardless of their role.