The security perimeter for businesses has expanded as more devices are used for work purposes. Firewalls and intrusion prevention systems alone are not enough to protect organizations from modern cyber threats. Security professionals are most concerned about advanced persistent threats, targeted malware attacks, and spear phishing. While mobile threats are less of a concern, the risks of attacks from advanced threats and targeted malware are especially high in the retail sector due to past data breaches. Healthcare and financial sectors show more concern about targeted attacks than advanced persistent threats. Companies with chief information security officers demonstrate a deeper understanding of advanced persistent threats and targeted attacks.