The first thing you should know about the costs and the benefits of developing a cybersecurity program for your business is that the benefits far outweigh the costs. The costs are simple, time and money. Not only is training for cybersecurity taking away from the work that you hired them to do originally, but cybersecurity programs don’t grow on trees either, you will either need to hire people to give your employees a crash course or create the program yourself. The benefits however, are immense. Cyber attacks can positively devastate a company. No matter how much you end up spending on the training it will be far less than the worst case scenario of having a team of people who are completely clueless in cybersecurity. As far as what training should be done, I think the bare minimum is training against phishing attacks, as they can and do target just about anyone and it only takes a very quick lapse in judgement to make a very big mistake.