Why training employees on cybersecurity is important - and what a training program should look like.