Computer security in the business world consists of security groups in AD and a password policy based on 8 characters and asking staff to nicely not share their passwords. It's a huge joke and will continue to be because the technology isn't there and senior managers are not going to jail when these hacks happen and it comes out that they were incompetent and thought they knew what they were doing because they were nominated for a CISSP.

I'm about to walk away from the corporate IT world because I'm over beating my head against the desk while people who literally can not turn a computer on without a 1 hour demonstration tell me they know better.