Human error and cyber security