Depending on your perspective, threats against IT systems are either extremely rare, something that happens to other people, or a daily (or near-daily) occurrence. The former is generally from the perspective of the end user, whereas the latter will be the perspective of IT professionals. One of the challenges I’ve encountered in talking to end users about these threats, is to communicate what is happening to them in a way that is both accurate and at a level appropriate to them.