Yeah, correct me if I'm wrong, but I believe the vast majority of hacks are along the social hacking vector. If we believe this is generally true, then the best

Yeah, correct me if I'm wrong, but I believe the vast majority of hacks are along the social hacking vector. If we believe this is generally true, then the best ROI of our security resources is in training personnel to withstand the attacks. There are some challenges to overcome. First, success will require that leadership within an organization understands that we cannot simply throw more technology at the problem. We need good security professionals who know how to educate the general public. Organizations need to find creative ways to make it part of their cultural DNA to learn the skills required for breach avoidance. Second, as any medium advances it takes time for people to catch up and approach it in a way that is not so naive. If we are honest with ourselves, technology is as much a medium as it is a tool. For example: When a film of an oncoming train was shown to early audiences who had never seen motion picture before it made them instinctively duck as the train approached them. It was like a thrill ride today. It takes time for social groups to desensitize from a new medium. We took the naive approach with social networks, and now we are learning the consequences. The problem is that technology is introducing new mediums at such a rapid pace that many people don't have enough time to become more sophisticated in its use.