When it comes to cybercrime, employees can either be an organization’s most powerful defense or their biggest weakness.