We are not getting smarter! We still fall for social engineering; We still click on Phishing emails; we still don’t patch our systems; we still don’t look for pad lock or secure connection before logging on to our bank acount; we still think our account security is our bank’s problem.
and the list goes on! Employees and customers play a big role in security. Humans are the easiest targets (since the only controls we have is our judgement, our activeness, our observational power). We can add layers of the strongest technological controls but they are of no use if the Users of those controls do not pay attention or follow processes.