Most of the time IT is just implementing policy from the CIO, which is basing it on the requirements of the company&#x27;s insurers. Insurance companies require some very annoying things like Anti-virus. It&#x27;s like having a lock on your office. You do it so the insurance company will pay you if someone comes in and steals your stuff.