IT security is a necessary evil