Unfortunately, it's not changing in the right way. As major computer corporations begin acknowledging security as a feature that customers find important, more and more developments in security tools and functionality emerge.
Security tools are also expensive, often prohibitively so.
Companies also spend hundreds of thousands on security consultants to secure networks and servers, and to find the holes and weaknesses. But companies spend incredible amounts of money on those aspects of security without understanding the importance of a secure foundation. Only through developing secure habits among computer users can the interests of security withstand attacks. Training and education of all users of a network, everyone with access to corporate data, must focus on protecting the information under their control. No intrusion detection system can detect a graveyard shift admin who gives out passwords over the phone to the wrong person.