One of the biggest dangers for companies when it comes to IT security is the human factor. Even the best firewall is useless if employees open the door to cyber criminals via phishing emails or other weak points.
The problem: the mindset.
The idea that you won't be attacked anyway often prevails. Not only among employees, but also at management level. This mindset needs to be overcome.