In 300 words, discuss what is the weakest link in the security of an IT infrastructure?  What are some of the strategies for reducing the risks?