Basically big orgs have more to lose than gain because they are so big. Crippling an employee's machine when you have 15 employees to reduce a risk that has a 5

Basically big orgs have more to lose than gain because they are so big. Crippling an employee's machine when you have 15 employees to reduce a risk that has a 5% chance of occurrence is a bad tradeoff. Whereas if you have 1500 employees and a risk that has a 5% chance of happening, that means by crippling the machines you have have prevented 75 incidents. Also you're only crippling the machines of a certain portion of people the secretaries, HR, and Marketing departments that just use their computers for email and facebook don't notice a problem.