Employers should develop cybersecurity protocols and invest more in employee training programs