Many of the most successful hackers no longer first look for software vulnerabilities. 60% of security professionals rank employee carelessness or negligence as a top threat, up from 44% in 2015. 66% of all cyber insurance claims stemmed from employee negligence or malfeasance, according to Willis Towers Watson. People develop false confidence when theyre aware of a problem but dont know how to properly address it. Security experts are still learning how to address human security vulnerabilities, even the best can substitute mere awareness for preparation.”]
Source: https://www.darkreading.com/attacks-breaches/creating-a-security-culture-solving-the-human-problem