Policies and software are not enough to secure your data, staff must be regularly trained.| CSO Online