For businesses around the world - but particularly those based in the United States - the threat environment in IT has never been more complex. Unfortunately, many businesses build their IT security practices on received wisdom: Assumptions that simply don't hold up in practice.