Leadership needs to be aware of the reputational damage that a cyberattack can cause their organizations and understand that prevention is better (not to mention cheaper) than not doing anything. A genuine interest in cybersecurity will also cascade down from the CEO to the remote workforce, ensuring better awareness and better security.