Which of the following is the WEAKEST link in the security posture of an organization?

While technology has vulnerabilities, it can be updated and secured; its weaknesses are often exploited due to human factors rather than being inherently the weakest link.

Infrastructure can be designed with resilience and security; its vulnerabilities are frequently linked to human-made misconfigurations or operational errors, not the infrastructure itself as the weakest point.

People are considered the weakest link in security because human error, negligence, or malicious actions can often compromise even robust technical and infrastructural safeguards through social engineering, misconfigurations, or policy non-compliance.

Regulations provide a framework for security but do not introduce vulnerabilities; rather, human non-compliance with regulations can create weaknesses.