Organisations must provide cyber security awareness to protect against financial, reputational, and data loss. By raising cyber security awareness among employees, organisations can empower them to avoid being victims of cyber-attacks and their consequences. By providing this education, employees can identify and report cyber threats, reduce the risk of falling for phishing scams and other social engineering attacks, and take the necessary steps to protect sensitive information. This will help strengthen the organisation’s overall security and mitigate cyber-attack risk.