The threat landscape has changed significantly in the last 10 years. Those changes have been, in most cases, for the better.
The whole digital world has changed as well. In most cases there are not enough IT specialists available, never mind ones who have the additional knowledge of how to protect their environment to go around.
Understanding digital security, testing defences and thinking like a cyber criminal is not what everyone wants to do.
This is where a managed security provider comes in. In most cases they live and breath in this space. They are experts in Business security including applying the NIST Framework to business