How is the security of firm's information system and data affected by its people organisation and technology?

The security of a firm's information system and data is affected by people in the organization because people can leak the company's information. The organization has the duty of giving people access to its information system and therefore must set the appropriate boundaries.