@#2 ... It all depends on how good their IT departments were and how well they were funded. ...

Absolutely, with an emphasis upon the latter part of your comment.

Funding.

When I was in IT, I always had a battle to get the funds I needed.

But then one thing occurred... we were attacked and we lived through the attack. I then was able to show a direct link between the funds allocated the prior years and the protection those funds provided to allow us to survive the attack. Subsequent to that event, it was a bit easier to get funds.

Not all IT teams are that lucky, as IT is typically seen as a cost-center in companies, and nothing to do with generating profits.