Human error, while still significant, has dropped to third place of most concerning threat actors.