The No 1 weak link for business when it comes to cyber security- is the people who work in the business. Educating employees on cyber risks is a key step, but this does require resources, and the participation of employees.