The logic behind risk management makes almost all companies to focus on protecting their servers instead of spending time on the workstations.