...believed that the most likely cause of an IT security issue came from their own employees. The reasons for this were down to staffignoring, not being made aware of or not being sufficiently trained on security policies, as well as making mistakes or...
http://blogs.zdnet.com/projectfailures/?p=1172