reply to this discussion. I reviewed the reports from 2019/2020/2022. Here are my thoughts. People are still the number one problem. We always will be of course, but in 2022 82% of events contained a human element. This tells me that training people is incredibly important and needs to be improved. I know most people roll their eyes when they have to do some sort of security training ( most of them). They still write down passwords on a sticky note and leave it on their desk( I had to take one away from an employee of ours just last week). So finding a way to improve these trainings to be more engaging so people can actually learn and be safer is a goal for us a company but I think is an industry goal ( or should be). It does work the reporting of phishing attacks have actually gone up. That means people are getting wiser to these kinds of attacks. Most attacks are financially motivated. I know this is nothing new here but money is everything. You finally get into a network to steal information or you find an open bucket of some kind with all this data