In the U.S. alone, the annual damage from cybercrime has increased by 33%, rising to $16 billion in 2024. The vast majority of these breaches are down to human failure, such as misconfiguration of systems and appliances, mishandling of information or storage devices, and manipulation by bad actors. But if the human factor is the weakest link in information security, it’s also the area where the right solution can have the biggest impact. Human-centered security approaches offer significant potential for sustainable information security within organizations. It can encourage, for instance, every employee being concerned about secure passwords, suspicious and attentive about possible email threats, sure not to leave their computers unlocked, and careful not to talk about sensitive business issues in public.