An IBM study found that human-error accounts for 95% of security incidents, yet security awareness training for employees often ends up on the back burner.