Back to basics with IT security