Cyber programs often miss the significant portion of risk generated by employees, and current tools are blunt instruments. A new method can yield better results. Fuente: Mckensey