That is a huge oversimplification. Do yourself a favor and read this http://www.symantec.com/content/en/us/enterprise/media/secur... or just the 'Executive Summary' if you don't want to read the whole thing