Not having seen this before I thought it's a nice way to communicate basic cybersecurity, even if "people" is a bit too generic IMHO

So i tried to find a bit more background information. It tires out that there are multiple 3p of cybersecurity

patches, passwords, phishing
Protect, Prioritize and Patch
perimeter, people, and policies
People, Processes and Products
Passwords, Patching, and Policy

Consistent is that in each of the trios one term sticks or in a misfitting way

#cybersecurity