Steve Adegbite of Wells Fargo stressed that the idea of operational risk assessment and management is perhaps the most important aspect of organizational security. He stressed that online banking security is essentially predicated on the ideas that evolved during hundreds of years of brick and mortar physical security. Even if an organization has the perfect risk model, they are still vulnerable to the one, uncontrollable factor: humans. Companies need to understand that zero-days are an unfortunate inevitability of technology and that their security measures will eventually fail.
Source: https://threatpost.com/realistic-risk-assessment-key-to-security-management/104165/