Every security practitioner knows that employees are the weakest link in an organization, but this is no longer the case.