For many organizations, endpoint security consists of anti-virus software and network security consists of a firewall. What can Aberdeen’s research tell us about these minimalist approaches, in comparison to organizations that have deployed additional security defense-in-depth? This Analyst Insight confirms – and quantifies – the prevailing wisdom that enterprise security based on anti-virus software alone is not enough.