Cybersecurity is 'for people' and you need to keep that in mind when you make decisions about security.