As the main point in article, I agree, it is not the technology but people. Technology helps but often after the fact. I have been part of catching some security breaches, misuses, etc since 70's and about half of the cases had very little to do with system security but the infrastructure itself. Unfortunately in computer world people ( often management ) sees / hears problems as a system problem, not as a business problem which it is. Again, a very good article and I hope that it will wake up at least some audience.