A castle may have the tallest walls and the deepest moat, yet it only takes one distracted guard to open the gate and let the enemy in. We once consulted for government agency whose IT director boasted of having “the best firewalls in the region.” During the session, we asked a staff member to log into her email on the projector. In minutes, the room gasped as we demonstrated how her password could be cracked, her inbox spoofed, and her boss tricked into approving a fraudulent payment. The real risk was never the firewall. It was the human sitting behind…