Organizations must do people patching: Similar to updating hardware or operating systems, you need to consistently update employees on the latest security vulnerabilities and teach them how to recognize and avoid them.