By default we'll pull a profile shot through from Gravatar if they have one, but if not you can upload your own.
It's probably the largest and well renowned service for hosting images and simply attributes it to their email address. It's completely free.
You may notice some employees already have profile photos - it just means they have already configured Gravatar.
2. Upload A Photo
You can also upload a photo from an employees profile page as per here: