Anyone who has had any involvement in IT security knows that users are probably the biggest risk factors. Irresponsible, not sufficiently security-conscious behavior can cause enormous damage to any organization.