Security is about much more than having a hard to guess password and a firewall on a computer.
It's about properly securing your data, computers, networks, web applications and all connections between them.
It's about having policies in place on what to do in certain situations.
It's about creating awareness amongst employees and management about potential security risks, how to recognize them and how to act on them.
It's about how you work with sensitive data like personal identifiable information, billing information and healthcare information, ...
But most of all, it's about protecting your business or organisation and your clients.