Social engineering
nManipulating relationships to circumvent network security measures and gain access to a system
Some risks associated with people:
nIntruders or attackers using social engineering or snooping to obtain passwords
nAn administrator incorrectly creating or configuring user IDs, groups, and their associated rights on a file server