People! The biggest risk, in this case, is also the biggest asset in any organization. You obviously can't function without people in place. But security is not about code or software. It's about seeing the people and noticing a change in their behavior. If there is a modification, debug and defuse it before the problem causes irreparable and irreversible damage to the repute of the organization.

You do need to enforce policies in place and while these policies are there to protect the business, they are also implemented keeping in mind the behavior of the company's team members.

So next time you think about how secure your office or network is, take a moment to look at the office environment around you. The organization, network or security solution is only as strong as its weakest link.