1. Human error : 

An employee mistake, such as a simple typo, can seemsmall… but the repercussionscan be huge. For many businesses, a human errorrelated breach has resulted in fines, loss of customer trust and losing access to data.

Common ways that risky employee behaviour can lead to a security incident :

• Sharing, writing down or re-using passwords across multiple accounts
• Carelessly handling data, like entering the wrong email recipient or attaching the wrong file
• Lacking awareness of common threats, such as spear phishing emails
• Failing to understand that security is the responsibility of all employees, not just a problem for the IT department

2. Employee falling for a phishing attack:

The most common way of an employee causing a security breach is by falling for a phishing attack. And with phishing being more targeted and sophisticated than ever before, employees are finding it increasingly difficult to spot these attacks.

The clever techniques attackers use to reel in your employees:

• Spear Phishing — These hyper-personalised attacks target a specific individual or group, with the attacker conducting prior research into an often senior-level target.
• Business Email Compromise — If an attacker gains access to a legitimate email account, they can exploit ‘colleagues’ by posing as a trusted source via a BEC attack.
• Domain Spoofing — An attacker can fake the display name and sender address of an
  email to make it look like it came from inside the company or via a trusted vendor.