HSI seems like an after thought as most cybersecurity professionals are not focused on the human element. Instead, they focus on the systems, process, or software. It is unfair to say that these professionals are out of touch, especially when you consider the lack of research on it, but it seems that they will focus on any other solution such as system hardening, more policies, or even removing the human from the equation all together. People cannot break the system if they never touch it, right? In a matter of speaking this is true but demonstrably impractical as people need system access to do their jobs. Learning more about human behavior as well as adequate training will help the organization minimize threats or negative impacts to their systems.