A decade or so ago, IT security was as simple as buying antivirus software for each computer in a business. As long as you kept renewing your antivirus, kept it updated, and ran regular scans, your business would avoid 99 percent of the threats out there.
Over the last several years, things have changed and become much more complicated.