This issue can no longer be viewed as the sole responsibility of IT departments.