> and are driven by compliance box ticking

For many IT departments, passing audits is a huge deal, that is very important to senior management. I know for my last set of compliance audits, I had to show evidence that every employee workstation was encrypted, patched, and running up to date Anti-virus software. (My company deals with PHI data)

I know there are other ways to solve many of the problems, but ensuring disk encryption and patching especially can be difficult if you have a mix of systems, and OS's.

I think 2 of the biggest pushes for this lately is the huge cost of 'cyber insurance' for things like ransomware atacks, as well as reporting requirements for lost/stolen laptops that could potentially have PHI on them.