I agree, the problem however is that threats are constantly evolving and getting more complicated. Even most IT people don't understand the threats properly (I know I struggle).
It used to be that could just tell people to install a security suite on their computer and they'd be mostly OK. I don't think that's really true any longer.
You could also partly lay the blame at Microsoft's door in getting users to start connecting to internet with an OS designed without any reasonable security (Windows 95).
Now that we have operating systems with better security it's hard to change people's usage patterns to take advantage of that.
It used to be that could just tell people to install a security suite on their computer and they'd be mostly OK. I don't think that's really true any longer.
You could also partly lay the blame at Microsoft's door in getting users to start connecting to internet with an OS designed without any reasonable security (Windows 95).
Now that we have operating systems with better security it's hard to change people's usage patterns to take advantage of that.