In a paper of four pages, the writer looks at the human element in cyber security. Steps for drafting an effective approach to policy are examined. Paper uses three sources.