Humans are both the most valuable asset and the weakest link in cyber security. On one hand, they are the innovators, developers, and operators of security systems. On the other hand, they are prone to mistakes, susceptible to manipulation, and often unaware of the threats they face.