Building a Culture of Security: Why Employee Training is Crucial