Cyber security in a Zero Trust world: the importance of educating users