Computer Security Management System should consider the human factor as one of the most important and decisive when implementing a good information security management system. People represent the weakest link in computer security, unlike computers, people may not follow instructions exactly as they were dictated, in addition, they may carry out actions that provoke a security hole in the network of the organization. In short, all implemented solutions are useless in the face of ignorance, plus 75% of the problems is caused by failures in the configuration of the equipment or due to misuse by the staff.”]
Source: https://hackercombat.com/ways-to-make-the-human-factor-a-non-issue-in-cybersecurity/