All it takes is one click by an employee to put your data in jeopardy