The answer is not to spend. Spending is what got us here. Spending on "automated" systems that need to be maintenance more often than they're used.
The very existence of our profession, the "IT Professional", is a symptom of the root of the problem. The root of the problem is the general public does not understand how computers work, yet they rely on them for literally everything.
How do you stop malicious packages from being mailed to your employees? You have a receiving department. Shielding the workers from the outside world.
Yet when the internet came along everyone said "oh sure everyone in the company gets their own company email"
Not everyone needs a company computer, or company email, or internet access