A network of employees outside IT who promote cybersecurity to their colleagues can do wonders for an organization’s security culture.