An organization needs to adopt IT security best practices to prevent exposure to threats and vulnerabilities that could result in financial loss, legal consequences, regulatory sanctions, and reputational damage.