[mothered]

As you may of heard, I always think in the back of my head that, humans are the most vulnerably to gather information.

And you're 100% correct.

You can have the best security measures Implemented, all the IDS/IPS systems and WAFs In place but If the user behind the PC simply hands over the password due to a well-crafted social engineering attack, the technical side of It (security) Is futile.