Malicious software

Malicious software attacks are a common concern for IT security professionals. Even with the growth in the use of IT security and antivirus software, these attacks continue. Why do you feel that this is a constant threat? Are there actions that IT security professionals can undertake to reduce or eliminate this threat?