Human error is the main security issue for IT directors.