There is some misconception between IT Security and Information Security. Information Security has inevitably changed since the dawn of computers and the growth of the internet. Very rarely do we store information in a filing cabinet, but the same slightly adapted principles continue to apply, albeit there are many crossovers with IT Security.
Information Security protects your data allowing only those personnel authorised to access it. This information should be protected in a way that it cannot be tampered with. IT Security on the other hand protects your hardware and software from external attack.
Security threats come in many different forms and guises such as malware, malicious software containing viruses, ransomware and spyware. Your physical devices like phones and laptops that are used to access the internet, emails etc. should all be monitored and protected.