As this article, points out training and awareness are vital in an organizations cyber security strategy. Even with a multitude of technical controls in place a simple click from a privileged user can circumvent the best defenses. Information security professionals have to get leaderships/managements buy-in to support a comprehensive security strategy.
Get Ready For A Ransomware Tsunami – Forbes