Not training the employees: I can provide email filtering, DNS filtering, firewalls and all sorts of technical solutions to security. It all goes to pot if so

Not training the employees: I can provide email filtering, DNS filtering, firewalls and all sorts of technical solutions to security. It all goes to pot if someone gets click-happy on weird websites or email attachments or falls for the "Your $Company_President need to transfer some funds" email.