The theme of this week's discussion is why employees do risky things like click on malicious links that defeat multifactor authentication