. . "IT security is a resource and also a potential drain on resources." . .