Business relationships.

What is the weakest link in the security of an IT infrastructure? What are some of the strategies for reducing the risks?