92% of organizations rank users as their primary security concern