It may sound painful, but not following some of the advise offered may be the cause of real agony. To protect data, systems and information security, IT pros set up firewalls, IDS systems, PKIs, passwords...just about anythnig they can think of. But all the technological devices used will never be completely effective until the Human issue is closely examined. Policies must be explained and enforced, and workers must be given a code of conduct and warned in detail about hackers' scams. Humans, the site explains, must protect data just as tirelessly as any firewall.
http://www.humanfirewall.org/