Many cyberattacks are now highly convincing and specifically exploit human error. Technical safeguards alone are therefore often no longer sufficient.