General questions about IT security