Security Think Tank: Is a ‘cyber-safe working environment’ a reasonable target?

What are the best security controls to ensure a safe working environment where employees do not have the unfair pressure of being the first line of cyber defence?