Assume that end-users need help with understanding how to stay secure, but don't try to make them experts, according to a panel at Tuesday's SC World Congress in New York.