Strategies for Reducing The Risks of Security in IT Infrastructure

In 250-300 words,  What is the weakest link in the security of an IT infrastructure?

What are some of the strategies for reducing the risks?