Think your staff would never fall for a phishing scam? Overconfidence could be your biggest cyber security threat. Here’s what your business should know.