Train your employees on the most basic and fundamental of security aspects. It may save you from a potential big disaster.
Keep training and mock phishing your employees regularly. Your employees will be conditioned to think and behave securely all the time.
Don’t bore your employees with just e-Learning. Supplement with face-to-face sessions and run activities using creative means such as VR games.