People are arguably the biggest risk. By people we mean staff, as well as other individuals an organization may come into contact with – i.e. contractors.