Absolutely. One of the most important features of security is that the first line of defence is a well-trained employee, so that employees are fully aware of it. The answer, quite simply, is yes, adequate training, good training, training supported through regulatory means—that is, requirements, rather than something off the back of an envelope.