Information Security Policies are meant to protect organizations. One challenge related to effectively implementing policy is the end user. Why is the end user sometimes a security weakness? What is spear phishing? Discuss one or two successful spear phishing examples. What can be done to limit the effectiveness of spear phishing and to address the human weakness?