People are often considered to be a weakest link and significant number of the security incidents is attributed to the human errors or negligence. However, we are more focused on technologies, processes or data instead of giving proper attention for the human vulnerabilities. Fast adoption of emerging technologies is demanding us to ensure that technologies and controls are designed with human behavior in mind. We need to understand users’ interactions with technologies, controls and data, and adjust our security strategies accordingly.