Employees are the greatest security risks, especially since they are prone to be used as pawns for hackers. The scope of security doesnt extend to all devices, such as Samsung Galaxy phones having a massive security flaw and ninety-five percent of Google Android phones open to an attack because of a tool installed by default in their products. Employee negligence and lack of compliance is also a big issue, even without considering the BYOD policy. IT security can only do so much restricting certain access points to your network, but they wouldn’t be able to prevent security issues on devices themselves.”]
Source: https://securityaffairs.co/wordpress/39703/security/employees-security-awareness.html