Would you give a key for your home to a child without first ensuring they understand how to keep the key safe (and why this is important)?
Would you give a login account for your organisation’s email system to a new staff member without first ensuring they understand how to keep the information safe (and why this is important)?
Staff cybersecurity awareness training is low tech but highly important.