To really win at the game of cyber-security, you must tackle really hard problems such as usability, business process maturity and consistency, user training, network design, and optimization of your portfolio of applications.
FORBES: Why Security Without Usability Leads To Failure