Information security is about people, yet in most organizations protection remains focused on technical countermeasures. The human element is crucial …