A critique on cyber security, businesses, and the Web

I've been working in IT now for over 10 years, starting off from help desk to imaging tech, then a hop skip over into systems administration. Fourteen years ago, cyber security was not as serious a subject as today. Somewhere around late 2010's there was a big shift in attitude and it seemed security for once was taken seriously, but it wasn't what I expected. It was more like a game of hot potato where shuffling risk and liability onto someone else rather than addressing the actual security issues was more important. Risk in the business world translates directly to liability while it's variable on whether or not a security issue is a risk worth addressing. It just so happens that since businesses can be held liable for damages as a result of their lax cyber security, security is now of concern. In the not so distant past, this wasn't always the case. This is really only made so due to recent regulatory pressure, especially among financial institutions. This has lead to businesses…