No matter how advanced our cybersecurity defenses become, it’s the human layer that makes decisions, mistakes and oversights.

My first week on the job as Director of IT Policy at Cornell University in 2001, a manager in systems, Sarah, invited me into her office. After some meet and greet, she asked me what I knew ...