Security Think Tank: Avoiding the blame game

What are the best security controls to ensure a safe working environment where employees do not have the unfair pressure of being the first line of cyber defence?