Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.
I can't really stereotype the whole industry, but they'll be proactive about anti-virus software because they've already seen the effects.