Investments focused on securing a constantly changing IT infrastructure do not address the unpredictability of human behavior.
