Bruce Schneier has said that amateurs target systems , but professionals target people , and this article makes that clear. I don't do this kind of testing because I'm really bad at it, but the bad guys are very skilled at this deception. One ignores this area at his own peril. This is indeed a good article, and should be required reading for all company managers. It's been a long established fact that the weakest link in any security program is usually the employee.
Many companies still have a long way to go in that department.
They did it by killing all those who opposed them. In response to mhoward While employed by a very large Silicon Valley Network Monitoring and Manufacturing firm I experienced Corporate espionage first hand. Not only did the FBI become involved in tracking down the foreign national spies, but also the company began to acknowledge what we had been telling them all along, security had to be tightened. For over a year I had ask why a major U.S. network monitoring center was behind glass walls and used as a showroom to prospective clients. We also had many discussions concerning the general security of the office areas, systems and staff.