Rethinking IT Security in the Age of the Cloud