The weak link: people Well-known hacker Kevin Mitnick – who allegedly hacked into the US Department of Defence’s network more than one hundred times and penetrated NSA systems on multiple occasions – once said: “Companies spend millions of dollars on firewalls, encryption, and secure access devices and it’s money wasted because none of these measures address the weakest link in the security chain: the people who use, administer, operate and account for computer systems that contain protected information.” I agree with Kevin Mitnick.
This stems from the fact that, in all of the cyberattacks known to us, attackers focused their attention on people as the weak link: in other words, end users and their behaviour.