The most effective protection is increasing employees’ awareness, and it’s up to HR to maintain it.