In many successful cyber attacks, human behaviour opens the door or window. Technical tools can help, whether by obliging people to change passwords, or by adding MFA, reviewing code or filtering millions of logs. However, they won’t stop someone from clicking on a malicious link in an email. To cope with this human-created vulnerability, organisations spend hours on employee training, use external reviewers for their code, and create dedicated networks and guest Wi-Fi to keep the infrastructure resilient.