Investing in IT security can be hard to prioritize unless you know what you are helping to avoid.