The farmers and the mercenaries: Rethinking the ‘human layer’ in security

The article argues that the cybersecurity industry's strategy of relying on employees as a 'last line of defense' is fundamentally flawed, comparing it to asking untrained farmers to repel professional soldiers. The real human layer in security should be the trained security professionals (like CISOs and SOC analysts), not regular employees, because user reporting systems create noise that overwhelms security teams rather than improving defense.