Security Awareness alone is not enough. Employees must gain Cybersecurity Competence to defend the organisation from vicious cybercrime.