By now, we should all accept humans as the weak link in the information security kill chain, but if you still need some convincing read the recent article from Reuters highlighting Verizon and Symantec cybersecurity reports released this year. So what is a credit union board, executive management team, or information security officer to do? More security awareness training is an option.  Unfortunately training employees doesn't seem to be the answer according to a recently released study by ISACA and RSA.  In the April report, State of Cybersecurity: Implications for 2015, more than 700 respondents confirmed enterprises with security awareness programs are fairing worse than those without. The intent of this article is not to debate the merits of security awareness training programs, but rather illustrate how a credit union can mitigate the impact of the inevitable human error causing so many of the cybersecurity incidents happening today.