Security Think Tank: Use the work environment to educate on cyber security

What are the best security controls to ensure a safe working environment where employees do not have the unfair pressure of being the first line of cyber defence?