These statistics certainly echo the reality of IT security in business.  Employees, either maliciously or accidentally cause many of the security problems that businesses face on a day-in, day-out basis.  User education and proper training can offset this risk over time.

https://www.darkreading.com/cloud/45–of-businesses-say-employees-are-biggest-security-risk/d/d-id/1330879