HELP!!

I recently hired a consultant to write a database for our organization to use for Product Knowledge reference. After the project was complete and I went to have it put on my server our internal IT risk group turned me down and said they don't know anything about the security or security updates for PHP. Do you have any security documentation or information on how frequent updates come and how easy or difficult it is to update? I am a non IT person who is ready to scream and I need help fighting with my IT department. Thank you, Denise Wilson E-mail Confidentiality Disclosure: The information contained in this e-mail and any attachments is intended only for the use of the individual or entity to which it is addressed. It may contain information that is private, confidential, and exempt from disclosure under applicable law. If you are not the intended recipient, or the employee or agent responsible for delivering the e-mail to the intended recipient, you are instructed: (i) not to read, copy, or distribute the e-mail or any attachment, (ii) immediately notify sender by replying to this e-mail or by telephone (1.888.671.0400), and (iii) immediately and permanently delete this e-mail and all attachments from computers, disc drives, and other storage medium and destroy any printouts of this message and its attachments.