Internal user mistakes create large percentage of cybersecurity incidents