A relatively new risk area receiving particular attention in organizational policies was user behavior.
One avenue getting more notice is user behavior.