I think that we can all agree that keeping the company’s network secure  is one of the CIO's most important tasks. However, no matter  how many firewalls we put in place or how effectively we implement  two-factor authentication we still need to understand the weakest link in our security system: our employees.  

What this means for a CIO is that we are responsible for training our  staff to not make silly security mistakes. How best to go about doing  this? 

We  had better come up with a good solution otherwise all of the fancy  security tools in the world won’t be keeping the bad guys out.