Each security program has an objective: minimize enterprise risk to the level of the organization's tolerance. Humans are not the problem; they are an essential layer within your broader security ...