The weakest link in the security of an IT infrastructure

What is the weakest link in the security of an IT infrastructure? What are some of the strategies for reducing the risks?

An initial post must be between 250-300 words