Is the “human factor” in security breaches over blown?