Simple: To reduce cyber incidents. No matter how well prepared your IT team is – an employee that unwittingly triggers an attack stops all productivity for a period of time – even if only at the one affected workstation.