Improving security is not just a technology issue, nor is it just a people problem. We do have to address both elements to make it easy for people to do the right security thing.
Links:
Why Bruce Schneier is Wrong About "Fixing" the User | Lance Spitzner | LinkedIn
Security Design: Stop Trying to Fix the User - Schneier on Security