Cybersecurity for commercial areas: why the risk isn't just in IT. The weakest link in corporate security is not on the server, but in the vendor's inbox.