Rethinking your IT Security Strategy