This report recommends that since employees are the first line of defense in cyber-security issues, training employees should be top priority for CISO’s.