Cybersecurity awareness is too often a part-time effort