The most cost-effective cyber-security initiative you can employ – employee training.   Why?  Because organizations are usually hacked from the inadvertent, nonmalicious but nonetheless unsafe activities of employees.   
Learn more here:  http://entm.ag/1uwNERp