Humans are an important part of information security of an organization to consider, because

$q,$

they are often the weakest link in the system.

they cannot be compromised to attack the systems.

they are often targeted by malicious actors.

they have control and access over the systems.