It’s now recognized that people are the root cause of most data breaches, as many as 90% of all breaches, either inadvertently or maliciously putting data at risk. The expansion of the attack surface through mobility, the cloud and even the Internet of Things has just increased the number of ways that “people” can put data at risk. These breaches are, in many ways, preventable, but the first step in stemming the breaches in understanding why they happen.