The purpose of this article is to define the role and importance of human beings and their weaknesses in the information security system of an organization. All people make mistakes that can sometimes have serious consequences. The working hypothesis presented in this article was expressed in the belief that human beings are the weakest link in the organization's information security. According to the "2014 Cyber Security Intelligence Index", as much as 95% of all security incidents are related to human errors. For organizations, such situations are usually very costly, as they concern people who have access to the most sensitive data. As the study cited in the article shows, the awareness of threats in information systems among the respondents is low. The ongoing changes in the availability of information are associated with the need to constantly improvement its protection. Not only systemic, but also protection resulting from human competences. That is why it is worth focusing on him and considering possible methods of expanding his competences and continuous learning.