Since cyber attackers use social engineering techniques to target employees for their motives, employees serve as the organisation's first layer of protection. A weak link in the staff is usually the culprit in security breaches. Therefore, all employees within the organisation must be appropriately trained to recognise these strategies, counteract them, and disclose any suspected incidents through the cyber essentials scheme.