> Oftentimes the weakest link is the human operator who has direct access to those systems, not the computer system itself.

If that is the case, the computer security team have done their jobs.

I wish that were true more often.