--- title: Ackounting for Human Errer description: We explore how the psychology of human error can help you better understand your security vulnerabilities and choose stronger data protection solutions. image: https://shardsecure.com/hubfs/it%20business%20man%20in%20network%20server%20room%20have%20problems%20and%20looking%20for%20%20disaster%20situation%20%20solution.jpeg --- - [Home](https://shardsecure.com/) - [Blog](https://shardsecure.com/blog) # Ackounting for Human Errer ![Picture of ShardSecure](https://shardsecure.com/hubfs/ShardSecure%20brand%20assets/Logo%20(2022)/Profile/ShardSecure-Logo__Profile--Purple-Inverted.svg "Picture of ShardSecure") [ShardSecure](https://shardsecure.com) December 5 2022 ![A businessman looking stressed in front of a rack of computer servers to signify the role of human error in data security.](https://shardsecure.com/hubfs/it%20business%20man%20in%20network%20server%20room%20have%20problems%20and%20looking%20for%20%20disaster%20situation%20%20solution.jpeg "A businessman looking stressed in front of a rack of computer servers to signify the role of human error in data security.") # Ackounting for Human Errer Building skyscrapers. Composing symphonies. Walking on the moon. Humans prove all the time that we’re capable of truly incredible accomplishments. But the same humans who can design buildings and puzzle out harmonies are also highly prone to error. [Boredom](https://www.apa.org/monitor/2013/07-08/dull-moment), [stress](https://msutoday.msu.edu/news/2017/physicians-with-increased-stress-make-more-mistakes-in-patient-care), [distraction](https://www.ismp.org/resources/side-tracks-safety-express-interruptions-lead-errors-and-unfinished-wait-what-was-i-doing), and even [hunger](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3674453/) can all lead otherwise accomplished, skilled people to miss important things and make mistakes. This goes double for data security, where complex systems and lengthy procedures lend themselves to more mistakes than we might like to admit.  Let’s explore how human error constitutes a surprisingly large percentage of data compromises. We’ll also dive into how anticipating mistakes — rather than insisting they won’t happen — can help your organization better prepare for the inevitable.  ## People aren’t robots — so why are we designing data security as if they are?  By and large, our security systems are designed to face threats from external sources. But that’s not always where the greatest danger lies.  According to [Verizon’s 2021 Data Breach Investigations Report](https://www.verizon.com/business/resources/reports/dbir/?CMP=OOH_SMB_OTH_22222_MC_20200501_NA_NM20200079_00001), “The human element continues to drive breaches.” Indeed, 82% of breaches that the report surveyed in 2021 involved human error, from phishing and credential misuse to simple mistakes.  When it comes to cloud security, the numbers aren’t much better. According to 2021 figures, [65% of cloud network security breaches](https://www.cybertalk.org/2021/10/20/key-cloud-security-statistics-that-will-reshape-your-cloud-perspectives/) occur as a result of user errors. And a Sophos survey found that [45% of ransomware incidents in 2020](https://www.security.org/antivirus/ransomware/) could be attributed to successful phishing attacks where users made the mistake of downloading malicious email attachments or clicking suspicious links.  Nor is this a new situation. A [2015 study by CompTIA](https://www.shrm.org/resourcesandtools/hr-topics/risk-management/pages/human-error-top-cause-data-breaches.aspx) revealed that, although companies believed malware and malicious hacking were the top data security concerns, their own employees’ actions were the largest cause of security breaches even then. According to the study, human error accounted for 52% of the root causes of security breaches taken from a survey of over 700 businesses.  It’s pretty clear, then, that humans are not immune to making critical mistakes in the workplace. So why are we still designing security systems that rely on a complete absence of error?  ## Changing our mindset around mistakes  In part, experts say, it’s because our calculus around making mistakes is off in the first place. From the [Dunning-Kruger effect](https://www.britannica.com/science/Dunning-Kruger-effect), in which people with limited knowledge or competence overestimate their own abilities, to the [planning fallacy](https://spsp.org/news-center/character-context-blog/planning-fallacy-inside-view), we often assume we won’t make errors when we will.  Even though research shows we’re likely to make mistakes in [both overly simple and overly complex systems](https://www.hse.gov.uk/construction/lwit/assets/downloads/human-failure.pdf), we tend to be very bad at anticipating those mistakes. Or, as a [presentation on human error in a major American healthcare system](https://www.piedmont.org/media/file/PAR-CME-EMS-Hamby-Do-No-Harm.pdf.) notes, “People cannot easily avoid those actions that they did not intend to perform in the first place.”   So, what can be done?  First, as the academic paper “[Design Rules Based on Analyses of Human Error](https://dl.acm.org/doi/10.1145/2163.358092)” suggests, mistakes can be designed for in computer systems. “People will make errors even in the best designed systems, even with the best of training and motivations,” the article states. When we can anticipate that users will make errors and build failsafes into our plans, it’s less likely that one of those errors will cause the entire system to grind to a halt.  To that end, it’s important to understand how distractions, stress, boredom, and other elements of human psychology contribute to mistakes. If a boring task can be automated, or if a stressful routine can be rethought, the chances for error will diminish.  “Understanding how stress impacts behavior is critical to improving cybersecurity," said Stanford professor Jeff Hancock in [Tessian’s “The Psychology of Human Error” report](https://bcm.nacm.org/index.php/blog/human-error-heightens-cybersecurity-issues-in-us-uk), a broad 2020 survey of employees on stress and workplace disruptions. “[During the pandemic], people have had to deal with incredibly stressful situations and a lot of change. And when people are stressed, they tend to make mistakes.”  Lastly, it’s good to remember that there’s even a value in making mistakes. Stanley M. Gully, an associate professor at Rutgers University, has found that [encouraging people to make mistakes in training](https://www.nytimes.com/2007/11/24/business/24shortcuts.html) sometimes worked better than teaching them to avoid them. “In most personal and business contexts, if you avoid the error, you avoid the learning process,” he explained.  ## We’ve got your back  [Misconfigured storage bucket](https://threatpost.com/millions-hotel-guests-worldwide-data-leak/161044/)? [Cloud provider outage](https://www.pbs.org/newshour/world/major-outage-hits-amazon-web-services-impacting-a-wide-variety-of-sites)? [Mylar balloon hit a powerline](https://riversideca.gov/press/mylar-balloons-cause-thousands-outages-every-year)? Whether your issue is coming from just down the hall or halfway across the world, our Microshard™ technology can help minimize the fallout of human error and maintain your business continuity. Our [three-step microsharding process](https://shardsecure.com/resources/faqs/microsharding) desensitizes sensitive data for the cloud, rendering it unintelligible and of no value to unauthorized users. Microsharded data will remain confidential and protected — even if mistakes are made, buckets are misconfigured, or storage locations are exposed.  With its self-healing data, microsharding provides strong data resilience. It not only mitigates against the impact of human error; it also [neutralizes the effects of cloud ransomware](https://shardsecure.com/solutions/ransomware) and helps maintain data integrity and availability.  To learn more about how microsharding protects data in the cloud against mistakes,take a look at our [solution briefs](https://shardsecure.com/resources/briefs), [FAQs](https://shardsecure.com/resources/faqs), and [white papers](https://shardsecure.com/resources/white-papers). ### Sources  [Never a Dull Moment | APA](https://www.apa.org/monitor/2013/07-08/dull-moment)  [Physicians With Increased Stress Make More Mistakes in Patient Care | MSUToday](https://msutoday.msu.edu/news/2017/physicians-with-increased-stress-make-more-mistakes-in-patient-care)   [Side Tracks on the Safety Express. Interruptions Lead to Errors and Unfinished… Wait, What Was I Doing? | Institute For Safe Medication Practices](https://www.ismp.org/resources/side-tracks-safety-express-interruptions-lead-errors-and-unfinished-wait-what-was-i-doing)  [Your Decisions Are What You Eat | National Library of Medicine](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3674453/)  [2022 Data Breach Investigations Report | Verizon](https://www.verizon.com/business/resources/reports/dbir/?CMP=OOH_SMB_OTH_22222_MC_20200501_NA_NM20200079_00001)   [Cloud Security Statistics That Will Reshape Your Perspectives 2021 | cybertalk.org](https://www.cybertalk.org/2021/10/20/key-cloud-security-statistics-that-will-reshape-your-cloud-perspectives/)  [What Is a Ransomware Attack and How Do You Prevent One? | security.org](https://www.security.org/antivirus/ransomware/)  [Human Error Cited as Top Cause of Data Breaches | Society for Human Resource Management](https://www.shrm.org/resourcesandtools/hr-topics/risk-management/pages/human-error-top-cause-data-breaches.aspx)  [Dunning-Kruger Effect | Britannica](https://www.britannica.com/science/Dunning-Kruger-effect)   [The Planning Fallacy: An Inside View | SPSP](https://spsp.org/news-center/character-context-blog/planning-fallacy-inside-view)  [Leadership and Worker Involvement Toolkit on Understanding Human Failure | HSE](https://www.hse.gov.uk/construction/lwit/assets/downloads/human-failure.pdf)  [Understanding Human Error | Piedmont Healthcare](https://www.piedmont.org/media/file/PAR-CME-EMS-Hamby-Do-No-Harm.pdf)    ‘[Human Error’ Heightens Cybersecurity Issues in US, UK | National Association of Credit Management](https://bcm.nacm.org/index.php/blog/human-error-heightens-cybersecurity-issues-in-us-uk)  [The Many Errors in Thinking About Mistakes | The New York Times](https://www.nytimes.com/2007/11/24/business/24shortcuts.html)  [Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak | Threatpost](https://threatpost.com/millions-hotel-guests-worldwide-data-leak/161044/)   [Major Outage Hits Amazon Web Services, Impacting a Wide Variety of Sites | PBS NewsHour](https://www.pbs.org/newshour/world/major-outage-hits-amazon-web-services-impacting-a-wide-variety-of-sites)   [Mylar Balloons Cause Thousands of Outages Every Year | riversideca.gov](https://riversideca.gov/press/mylar-balloons-cause-thousands-outages-every-year)  [Human Error](https://shardsecure.com/blog/tag/human-error) ## Read on ![](https://shardsecure.com/hubfs/Picture2.jpg) June 15 2026 ### [ShardSecure MCP Secure Gateway](https://shardsecure.com/blog/shardsecure-mcp-secure-gateway-identity-aware-data-redaction-and-least-privilege-context-enrichment-for-ai-inference) [Read more](https://shardsecure.com/blog/shardsecure-mcp-secure-gateway-identity-aware-data-redaction-and-least-privilege-context-enrichment-for-ai-inference) ![](https://shardsecure.com/hubfs/Keyboard%20with%20high%20tech%20user%20map%20icons%20and%20symbols-1.jpeg) February 18 2026 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Unstructured Data Left Exposed: A Cloud Breach That Should Worry Every Enterprise](https://shardsecure.com/blog/unstructured-data-left-exposed-a-cloud-breach-that-should-worry-every-enterprise) [Read more](https://shardsecure.com/blog/unstructured-data-left-exposed-a-cloud-breach-that-should-worry-every-enterprise) ![](https://shardsecure.com/hubfs/Keyboard%20with%20high%20tech%20user%20map%20icons%20and%20symbols-1.jpeg) November 12 2025 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Can You Really Trust Hyperscalers with Your Data at Rest?](https://shardsecure.com/blog/can-you-really-trust-hyperscalers-with-your-data-at-rest) [Read more](https://shardsecure.com/blog/can-you-really-trust-hyperscalers-with-your-data-at-rest) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/Acronis%20and%20ShardSecure%20unveil%20a%20groundbreaking%20technology%20partnership%20set%20against%20a%20backdrop%20of%20a%20sleek%20modern%20office%20filled%20with%20digital%20screens%20displaying%20dynamic%20data%20flows%20The%20atmosphere%20buzzes%20with%20excitement%20and%20anticipation%20illuminated%20by%20sof-1.png) October 16 2025 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Acronis + ShardSecure: Stronger data protection for modern threats](https://shardsecure.com/blog/acronis-shardsecure-stronger-data-protection-for-modern-threats) [Read more](https://shardsecure.com/blog/acronis-shardsecure-stronger-data-protection-for-modern-threats) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/The%20image%20portrays%20a%20hightech%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20data%20security%20concepts%20At%20the%20forefront%20a%20glowing%20vault%20symbolizing%20advanced%20filelevel%20encryption%20stands%20tall%20surrounded%20by%20intricate%20patterns%20of%20fragmented%20data.png) October 1 2025 | [Data Sensitivity](https://shardsecure.com/blog/tag/data-sensitivity) ### [Revolutionizing Data Security: How Agentless File Level Encryption Makes Stolen Data Useless](https://shardsecure.com/blog/sensitive_data) [Read more](https://shardsecure.com/blog/sensitive_data) ![unstructured data](https://shardsecure.com/hubfs/Digital%20image%20of%20globe%20with%20conceptual%20icons.%20Globalization%20concept.jpeg) September 15 2025 | [Cybersecurity News](https://shardsecure.com/blog/tag/cybersecurity-news) ### [Elevating unstructured data security: ShardSecure® and Entrust® Join Forces!](https://shardsecure.com/blog/entrust_partnership) [Read more](https://shardsecure.com/blog/entrust_partnership) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/scales%20%20ransomware%20attack%20to%20pay%20the%20money%20or%20risk%20the%20attack.jpeg) July 29 2025 | [Ransomware](https://shardsecure.com/blog/tag/ransomware) ### [CISOs on Strategic Considerations in Ransomware Response](https://shardsecure.com/blog/ransomware-fine) [Read more](https://shardsecure.com/blog/ransomware-fine) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/Image%20for%20AI%20data%20types-1.jpeg) July 29 2025 | [Data security](https://shardsecure.com/blog/tag/data-security) ### [The Growth of AI is driving the Imperative of Securing Unstructured Data](https://shardsecure.com/blog/ai-unstructured-data) [Read more](https://shardsecure.com/blog/ai-unstructured-data) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20hightech%20digital%20landscape%20showcasing%20a%20sleek%20modern%20office%20environment%20illuminated%20by%20soft%20blue%20and%20white%20lighting%20In%20the%20foreground%20a%20large%20computer%20screen%20displays%20intricate%20graphs%20and%20charts%20related%20to%20data%20security%20while%20a%20gr.jpeg) July 22 2025 | [Data security](https://shardsecure.com/blog/tag/data-security) ### [How to make your SharePoint data of zero value in a zero day attack!](https://shardsecure.com/blog/sharepoint_breach) [Read more](https://shardsecure.com/blog/sharepoint_breach) [![ShardSecure®](https://shardsecure.com/hubfs/ShardSecure%20brand%20assets/Logo%20(2022)/ShardSecure-Logo__Horizontal--White.svg "ShardSecure®")](https://shardsecure.com/) 101 Avenue of the Americas, 9th Floor, New York, NY 10013, United States of America [![linkedin](https://shardsecure.com/hubfs/_2023/li.svg) ](https://www.linkedin.com/company/shardsecure) [![tweeter](https://shardsecure.com/hubfs/_2023/tweeter.svg) ](https://www.twitter.com/ShardSecure) [![facebook](https://shardsecure.com/hubfs/_2023/facebook.svg) ](https://www.facebook.com/ShardSecure/) [![facebook](https://shardsecure.com/hubfs/_2023/youtube.svg) ](https://www.youtube.com/@shardsecure877) © 2026 ShardSecure®. All rights reserved. [Privacy Policy](https://shardsecure.com/privacy-policy) ![websights](https://ws.zoominfo.com/pixel/62e7bb6d62a6b2008e071c83) ![](https://px.ads.linkedin.com/collect/?pid=5456580&fmt=gif) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "ShardSecure", "url" : "https://shardsecure.com/blog/author/shardsecure" }, "dateModified" : "2023-03-13T01:03:36.810Z", "datePublished" : "2022-12-05T12:00:00.000Z", "headline" : "Ackounting for Human Errer", "image" : [ "https://shardsecure.com/hubfs/it%20business%20man%20in%20network%20server%20room%20have%20problems%20and%20looking%20for%20%20disaster%20situation%20%20solution.jpeg" ], "mainEntityOfPage" : { "@id" : "https://shardsecure.com/blog/ackounting-for-human-errer", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://shardsecure.com/hubfs/ShardSecure-Logo__Horizontal--Purple-Inverted.svg" }, "name" : "ShardSecure" } } ```