Companies spend millions of dollars on firewalls and secure access devices, and it's money wasted because none of these measures addresses the weakest link in the security chain: the people who use, administer and operate computer systems.

Kevin Mitnick