IT security is often virtually forgotten