Cybersecurity incidents frequently occur because employees consciously or unconsciously act in the wrong way. If employees are more aware of information security, become better at recognizing risks and acting in the right way, then that reduces the chance of an incident or its impact.