What is identified as the root cause for almost all security breaches?

• A. Malware
• B. Human error
• C. Hardware failure
• D. Social engineering

Answer: (B)

Human factors drive most security breaches. Breaches often happen because a person makes a mistake or acts carelessly—like using weak passwords, reusing credentials, failing to apply patches, misconfiguring a system, or clicking a phishing link. These human errors create the opening attackers need to gain access, even when technical controls are strong. Malware and hardware failures can contribute, but they’re usually not the root cause on their own—malware needs someone to trigger it, and hardware issues tend to cause outages rather than breaches. Social engineering is a tactic that exploits human weaknesses, underscoring that the vulnerability lies in human behavior. Emphasizing training, robust access controls, and diligent configuration and patch management tackles the most common entry points for attackers.