there are always very sophisticated actors out there. and for them, we just have to assume that an attack could occur. so organizations need to be prepared. >> reporter: the government spent $10 billion on cyber security last year. but that can't defend against an employee who's duped into clicking on a malicious link. as one expert told me, there's no good defense against a stupid user. >> chris frates reporting for us. thank you very much. let's get more right now. joining us in "the situation room," cnn law enforcement analyst, tom fuentes, former assistant director of the fbi. also joining us, kim masters, editor at large for "the hollywood reporter" and christian whitton, senior adviser on north korean matters. i assume you accept the fbi's bottom-line conclusion, saying there's enough evidence to conclude that north korea -- the north korean government is responsible for these actions, you have no doubt about that? >> no doubt. they wouldn't put that out if they had the slightest doubt.