People are the very first element in a pragmatic cybersecurity strategy