People – Often the Weakest Link in Security, but One of the Best Places to Start