"Human error" doesn't explain continuing the process after failing the security questions, unless by human error you mean merely that "someone did it."