You want to wake them up to the risks and vulnerabilities they face, you want to talk about the tools that can minimize those risks, and you want them to understand that the company has a mechanism in place to keep people's knowledge current. 