Strengthen human defences with targeted awareness training, phishing simulations, and culture metrics.