The best laid plans of security professionals can be thrown into chaos by the acts of individual users.