A bit hard on HR..
Disclaimer: I have no HR affiliations.
"and HR and sales departments are the most often hacked because they are the least computer security aware"
HR is also at the pointy end when it comes to receiving legitimate unsolicited emails so they have to be far more aware than the average employee. Fake resumes and expressions of interest are very common vectors for phishing. So this is actually a bit harsh.
Biting the hand that feeds IT
